Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

drupal aggregation module 3.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-3000
The Aggregation module 5.x prior to 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote malicious users to bypass intended restrictions.
Drupal Aggregation Module 4.0Drupal Aggregation Module 4.1Drupal Aggregation Module 5Drupal Aggregation Module 3.0Drupal Aggregation Module 3.1Drupal Aggregation Module 3.2Drupal Aggregation Module 4.2Drupal Aggregation Module 4.3
NA
CVE-2008-3001
The Aggregation module 5.x prior to 5.x-4.4 for Drupal allows remote malicious users to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions.
Drupal Aggregation Module 3.2Drupal Aggregation Module 4.0Drupal Aggregation Module 4.3Drupal Aggregation Module 5Drupal Aggregation Module 3.0Drupal Aggregation Module 3.1Drupal Aggregation Module 4.1Drupal Aggregation Module 4.2
NA
CVE-2008-2999
Multiple SQL injection vulnerabilities in the Aggregation module 5.x prior to 5.x-4.4 for Drupal allow remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Drupal Aggregation Module 4.3Drupal Aggregation Module 3.2Drupal Aggregation Module 4.0Drupal Drupal 5.2Drupal Drupal 5.3Drupal Drupal 5.0Drupal Drupal 5.7Drupal Aggregation Module 3.0Drupal Aggregation Module 3.1Drupal Drupal 5.1Drupal Drupal 5.1 Rev1.1Drupal Aggregation Module 4.1Drupal Aggregation Module 4.2Drupal Drupal 5.4Drupal Drupal 5.5.
NA
CVE-2008-2998
Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x prior to 5.x-4.4 for Drupal allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Drupal Aggregation Module 3.2Drupal Aggregation Module 3.1Drupal Aggregation Module 4.1Drupal Aggregation Module 4.0Drupal Aggregation Module 3.0Drupal Aggregation Module 4.3Drupal Aggregation Module 4.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook