[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    [oss-security] CVE Request for Drupal contributed modules
From:       Greg Knaddison <greg.knaddison () acquia ! com>
Date:       2012-05-30 20:54:55
Message-ID: CAAPiX_J7mMJhLi-+MLXY5Vr++N3KYX+v56fmqj=_HKdTTDBYjQ () mail ! gmail ! com
[Download RAW message or body]

Hello,

This is a batch CVE request for several advisories of contributed
modules released recently. Let me know if you have any questions.

Thanks,
Greg Knaddison on behalf of the Drupal Security Team

http://drupal.org/node/1608864 | SA-CONTRIB-2012-090 - File depot -
Session Management Vulnerability
http://drupal.org/node/1608854 | SA-CONTRIB-2012-089 - Counter - SQL
Injection (unsupported)
http://drupal.org/node/1608828 | SA-CONTRIB-2012-088 - Mobile Tools -
Cross Site Scripting (XSS)
http://drupal.org/node/1608822 | SA-CONTRIB-2012-087 - Comment
Moderation - Cross Site Request Forgery
http://drupal.org/node/1608780 | SA-CONTRIB-2012-086 - Amadou - Cross
Site Scripting
http://drupal.org/node/1597414 | SA-CONTRIB-2012-085 - BrowserID -
Multiple Vulnerabilities
* CSRF that leads to privilege escalation/impersonation

http://drupal.org/node/1597364 | SA-CONTRIB-2012-084 - Search API -
Cross Site Scripting (XSS)
http://drupal.org/node/1597262 | SA-CONTRIB-2012-083 - Taxonomy List -
Cross Site Scripting (XSS)
http://drupal.org/node/1585960 | SA-CONTRIB-2012-082 - Zen - Cross
Site Scripting
http://drupal.org/node/1585890 | SA-CONTRIB-2012-081 - Aberdeen -
Cross Site Scripting
http://drupal.org/node/1585678 | SA-CONTRIB-2012-080 - Hostmaster
(Aegir) - Access Bypass and Cross Site Scripting (XSS)
http://drupal.org/node/1585648 | SA-CONTRIB-2012-079 - Post Affiliate
Pro - Cross Site Scripting (XSS) and Access Bypass - Unsupported
http://drupal.org/node/1585564 | SA-CONTRIB-2012-078 - Smart
Breadcrumb - Cross Site Scripting (XSS)
http://drupal.org/node/1585544 | SA-CONTRIB-2012-077 - Advertisement -
Cross Site Scripting & Information Disclosure
http://drupal.org/node/1585532 | SA-CONTRIB-2012-076 - Ubercart
Product Keys Access Bypass

-- 
Director Security Services | +1-720-310-5623
Skype: greg.knaddison | http://twitter.com/greggles | http://acquia.com
[prev in list] [next in list] [prev in thread] [next in thread]