| Max CVSS | 5.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-3093 | 3.5 |
The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" is
|
22-09-2010 - 04:00 | 21-09-2010 - 20:00 | |
| CVE-2010-3092 | 5.5 |
The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a fil
|
22-09-2010 - 04:00 | 21-09-2010 - 20:00 | |
| CVE-2010-3094 | 2.1 |
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a t
|
22-09-2010 - 04:00 | 21-09-2010 - 20:00 |