Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

Drupal Internationalization and Localizer Cross-Site Scripting and Request Forgery

BugsAlert Home > Drupal Internationalization and Localizer Cross-Site Scripting and Request Forgery
 
 

Some vulnerabilities have been reported in the Internationalization and Localizer modules for Drupal, which can be exploited by malicious people to conduct cross-site scripting and request forgery attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.




Original Source: http://secunia.com/advisories/29961/

Learn more about Drupal Internationalization and Localizer Cross-Site Scripting and Request Forgery
 
Tags: drupal internationalization localizer cross-site scripting request forgery

Related Items

      CVE-2007-6266 (bcoos)

      Virus hits local NH paper's Web site - NetworkWorld.com

      CVE-2008-0669 (Unity)

      WORM_VB.MAB

      CVE-2008-3757 (forced_matrix_script)

      CVE-2008-0197 (WP-ContactForm)

      Smart Publisher "filedata" PHP Code Execution

 

Pixel