Aggregation Module (Drupal) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2008-07-03. Vendor: Drupal.

CVEs of Aggregation Module

• CVE-2008-3000 - CVSS 6.8 (medium), 2008-07-03: The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote…
• CVE-2008-2999 - CVSS 7.5 (high), 2008-07-03: Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via…
• CVE-2008-2998 - CVSS 4.3 (medium), 2008-07-03: Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web…
• CVE-2008-3001 - CVSS 9.3 (critical), 2008-07-03: The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code,…