Vulnerability Bulletins |
SA-2008-067 - Drupal core - Multiple vulnerabilities |
|
| Affected software | Drupal |
|
Advisory ID: DRUPAL-SA-2008-067Project: Drupal coreVersions: 5.x and 6.xDate: 2008-October-22Security risk: Less CriticalExploitable from: Local/RemoteVulnerability: Multiple vulnerabilitiesDescriptionMultiple vulnerabilities and weaknesses were discovered in Drupal.File inclusionOn a server configured for IP-based virtual hosts, Drupal may be caused to include and execute specifically named files outside of its root directory. This bug affects both Drupal 5 and Drupal 6.Cross site scriptingThe More info: https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2008-10-22/sa-2008-067-drupal-core-multiple |
|