Drupal Token Module Script Insertion Vulnerability - Exabytes Security Portal

Categories

Applications (222)
Blogs (7)
Content Management (148)
Customer Relationship (2)
Discussion Boards (29)
E-Commerce (14)
General Purpose Directories (2)
Image Galleries (18)
Mailing Lists (1)
Tips (3)
Vulnerabilities (337)
Access Bypass (50)
Cross Site Scripting (123)
Denial Of Service (2)
File Inclusion (51)
Information Disclosure (15)
Privilege Escalation (2)
Remote Command Execution (16)
Session Hijacking (2)
SQL Injection (130)

Drupal Token Module Script Insertion Vulnerability

Published by David October 23rd, 2007 in Cross Site Scripting.

Application: Drupal
Affected Version: Drupal Token 4.x / 5.x
Vendor’s URL: Module download site
Bug Type: Cross Site Scripting.
Risk Level: Low

Solution:
Update to version 4.7.x-1.5 or 5.x-1.9 or latest version.

0 Responses to “Drupal Token Module Script Insertion Vulnerability”

Feed for this Entry Trackback Address

No Comments

Leave a Reply

You must login to post a comment.