Categories

Applications (282)
Blogs (7)
Content Management (190)
Customer Relationship (4)
Discussion Boards (41)
E-Commerce (15)
General Purpose Directories (2)
Image Galleries (21)
Mailing Lists (1)
Tips (3)
Vulnerabilities (393)
Access Bypass (64)
Cross Site Scripting (147)
Denial Of Service (2)
File Inclusion (55)
Information Disclosure (15)
Privilege Escalation (3)
Remote Command Execution (18)
Session Hijacking (2)
SQL Injection (150)
« Drupal Multiple Vulnerabilities
Kayako SupportSuite Multiple Vulnerabilities »

Drupal XSRF and Security Bypass

Published by TL Guan August 25th, 2008 in Access Bypass, Content Management and Cross Site Scripting.

Application: Drupal
Affected Version: all 6.x versions prior to 6.4
Vendor’s URL: Drupal
Bug Type: Cross Site Scripting and Security Bypass
Risk Level: Medium

Solution:
Update to version 6.4.

Subscribe

Latest

Archives



Valid XHTML 1.0 Transitional