drupal6 vulnerabilities (Debian)
27 vulnerabilities.
-
drupal6Debian Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different... 5.0 Medium -
drupal6Debian The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to... 7.5 High -
drupal6Debian Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random... 6.8 Medium -
drupal6Debian The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third... 5.1 Medium -
drupal6Debian Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when... 2.6 Low -
drupal6Debian Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6... 6.8 Medium -
drupal6Debian Drupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchange (AX)... 6.8 Medium -
drupal6Debian The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x... 2.1 Low -
drupal6Debian The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated... 6.0 Medium -
drupal6Debian Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded... 5.0 Medium -
drupal6Debian Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might... 5.0 Medium -
drupal6Debian The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal,... 5.0 Medium -
drupal6Debian The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal,... 5.0 Medium -
drupal6Debian Drupal cross-site scripting vulnerability via actions feature and trigger module 2.1 Low -
drupal6Debian The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated... 3.5 Low -
drupal6Debian The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case... 5.5 Medium -
drupal6Debian The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal,... 5.0 Medium -
drupal6Debian Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain... 6.5 Medium -
drupal6Debian Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version... 4.8 Medium -
drupal6Debian drupal6 version 6.16 has open redirection 6.1 Medium -
drupal6Debian Drupal 6.x before 6.16 uses a user-supplied value in output during site installation which could... 6.1 Medium -
drupal6Debian Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for... 4.3 Medium -
drupal6Debian Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows... 4.3 Medium -
drupal6Debian Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated... 6.5 Medium -
drupal6Debian Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12... 3.5 Low -
drupal6Debian Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal... 4.3 Medium -
drupal6Debian Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used... 4.3 Medium