Unscored DSA-2113-1 6 CVEs

drupal6 - several vulnerabilities

Published Sep 20, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	drupal6	6.6-3lenny6

Vulnerabilities 6

Unscored —

CVE-2010-3091

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2…

Sep 29, 2010
Unscored —

CVE-2010-3092

The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename han…

Sep 21, 2010
Unscored —

CVE-2010-3093

The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privile…

Sep 21, 2010
Low —

CVE-2010-3094

Drupal cross-site scripting vulnerability via actions feature and trigger module

Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy t…

drupal/drupal Packagist

Sep 21, 2010
Unscored —

CVE-2010-3685

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2…

Sep 29, 2010
Unscored —

CVE-2010-3686

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2…

Sep 29, 2010