Drupal Aggregation Module vulnerabilities
4 vulnerabilities
Known vulnerabilities in Drupal Aggregation Module, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2008-2998drupalaggregation_module
EPSS score1.03%
Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2008-2999drupalaggregation_module+1EPSS score1.06%
Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2008-3000drupalaggregation_moduleEPSS score1.16%
The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.CVE-2008-3001drupalaggregation_moduleEPSS score3.37%
The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions.