[Full-disclosure] XSS and AoF vulnerabilities in Drupal

2011-06-24 Thread MustLive
Hello list! I want to warn you about Cross-Site Scripting and Abuse of Functionality vulnerabilities in Drupal. - Affected products: - Vulnerable are Drupal 6.22 and previous versions. Taking into account that developers didn't fixed these holes, t

[Full-disclosure] XSS and AoF vulnerabilities in Drupal

2011-06-28 Thread MustLive
Hello list! I want to warn you about Cross-Site Scripting and Brute Force vulnerabilities in Drupal. - Affected products: - Vulnerable are Drupal 6.22 and previous versions. Taking into account that developers didn't fixed these holes, then version