Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | drupal7 | 7.14-2+deb7u11 |
| Debian · 8 | drupal7 | 7.32-1+deb8u5 |
Vulnerabilities 5
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allow…
-
Unscored —
SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows re…
-
Unscored —
The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remo…
-
Unscored —
Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu.
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x be…