Vulnerability Bulletins |
SA-2008-067 - Drupal core - Multiple vulnerabilities |
|
| Affected software | Drupal |
|
Advisory ID: DRUPAL-SA-2008-067Project: Drupal coreVersions: 5.x and 6.xDate: 2008-October-22Security risk: Less CriticalExploitable from: Local/RemoteVulnerability: Multiple vulnerabilitiesDescriptionMultiple vulnerabilities and weaknesses were discovered in Drupal.File inclusionOn a server configured for IP-based virtual hosts, Drupal may be caused to include and execute specifically named files outside of its root directory. This bug affects both Drupal 5 and Drupal 6.Cross site scriptingThe More info: https://www.drupal.org/node/324824 |
|