May 2010 | Develop Site

SA-CONTRIB-2010-061 - AddonChat - Multiple Vulnerabilities

Imagen de dev1961

Submitted by dev1961 on

* Advisory ID: DRUPAL-SA-CONTRIB-2010-061
* Project: AddonChat (third-party module)
* Version: 6.x-1.x
* Date: 2010-May-26
* Security risk: Highly Critical
* Exploitable from: Remote
* Vulnerability: Multiple (Privilege Escalation, Cross-site scripting)

DESCRIPTION

The AddonChat module provides Drupal integration with the AddonChat Java chat
room.

Due to unsafe handling of the global $user object, failed authentication at
the custom addonchat_auth.php script will log in an attacker as the chosen
user.

Inglés
Newsletter: 
Newsletter
SEO: 
vulnerabilities
Tags: 
security

What is a CMS?

Imagen de dev1961

Submitted by dev1961 on

Internet users need more content web control and independence information. This situation allowed develop CMS application.

A content management system (CMS) is a collection of procedures used to manage work flow in a collaborative environment. These procedures can be manual or computer-based. The procedures are designed to:

Inglés

OpenEMM 6.1

Imagen de dev2512

Submitted by dev2512 on

OpenEMM 6.1 comes with a slight GUI rebrush, an update of the import wizard, improved handling of deleted target groups and various bug fixes. For the full list of features and bug fixes please have a look at the ChangeLog file.

OpenEMM 6.1_RC1 is ready for testing and for your feedback (please use the corresponding entry in forum "Bugs, bug fixes & releases"). Thank you for taking the time!

Inglés