Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

Drupal Organic groups Information Disclosure and Script Insertion

BugsAlert Home > Drupal Organic groups Information Disclosure and Script Insertion
 
 

Some vulnerabilities have been reported in the Organic groups module for Drupal, which can be exploited by malicious users to disclose potentially sensitive information or conduct script insertion attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.




Original Source: http://secunia.com/advisories/30928/

Learn more about Drupal Organic groups Information Disclosure and Script Insertion
 
Tags: drupal organic groups information disclosure script insertion

Related Items

      Bugtraq: [ MDVSA-2008:053 ] - Updated pcre packages fix vulnerability

      CVE-2007-6304 (MySQL)

      CVE-2008-4938 (aegis, aegis-web)

      CVE-2008-2622 (peoplesoft_peopletools_component, PeopleSoft Enterprise, JD Edwards EnterpriseOne)

      FrSIRT - Ubuntu Security Update Fixes Postfix Denial of Service Vulnerability

      NetRisk Multiple Vulnerabilities

      Vuln: Oracle January 2008 Critical Patch Update Multiple Vulnerabilities

 

Pixel