Aggregation Module

aggregation_module

Vendor: Drupal • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-3001 1Drupal 1Aggregation Module Apr 23, 2026 Jul 3, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary e...Show more The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions.Show less
CVE-2008-3000 1Drupal 1Aggregation Module Apr 23, 2026 Jul 3, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.
CVE-2008-2999 1Drupal 2Aggregation Module Drupal Apr 23, 2026 Jul 3, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-2998 1Drupal 1Aggregation Module Apr 23, 2026 Jul 3, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.