Comment 5 for bug 181984

Revision history for this message
Emanuele Gentili (emgent) wrote : Re: Drupal5: SA-2007-031: SQL Injection possible when certain contributed modules are enabled

drupal5 (5.2-2ubuntu2.2) gutsy-security; urgency=low

  * SECURITY UPDATE: (LP: 181984)
    - SA-2007-031: SQL injection posssible when certain
      contribuited modules are enabled
    - SA-2008-005: Cross site request forgery
    - SA-2008-006: Cross site scripting (UTF8)
  * References:
    - SA-2007-031: http://drupal.org/node/198162
    - SA-2008-005: http://drupal.org/node/208562
    - SA-2008-006: http://drupal.org/node/208564

 -- Emanuele Gentili <email address hidden> Tue, 15 Jan 2008 13:57:17 +0100