GCVE - cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

Vendor	Drupal (`5a354f1f-83c2-5c0e-b1bc-3ae1f55812de`)
Product	Aggregation Module (`877be0cb-f60c-5ff8-b069-9f6d6958c003`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3001`	vulnerable	2026-06-08 04:50:32.794564	Details available The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions. Published: 2008-07-03T17:47:00.000Z Updated: 2024-08-07T09:21:35.044Z Open on db.gcve.eu Reference links http://drupal.org/node/269479 http://www.securityfocus.com/bid/29677 https://exchange.xforce.ibmcloud.com/vulnerabilities/43011 http://secunia.com/advisories/30618	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3000`	vulnerable	2026-06-08 04:50:32.791145	Details available The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions. Published: 2008-07-03T17:47:00.000Z Updated: 2024-08-07T09:21:34.515Z Open on db.gcve.eu Reference links http://drupal.org/node/269479 https://exchange.xforce.ibmcloud.com/vulnerabilities/43017 http://www.securityfocus.com/bid/29677 http://secunia.com/advisories/30618	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2999`	vulnerable	2026-06-08 04:50:32.790417	Details available Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2008-07-03T17:47:00.000Z Updated: 2024-08-07T09:21:34.913Z Open on db.gcve.eu Reference links http://drupal.org/node/269479 http://www.securityfocus.com/bid/29677 https://exchange.xforce.ibmcloud.com/vulnerabilities/43010 http://secunia.com/advisories/30618	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2998`	vulnerable	2026-06-08 04:50:32.788296	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2008-07-03T17:47:00.000Z Updated: 2024-08-07T09:21:34.556Z Open on db.gcve.eu Reference links http://drupal.org/node/269479 http://www.securityfocus.com/bid/29677 https://exchange.xforce.ibmcloud.com/vulnerabilities/43008 http://secunia.com/advisories/30618	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.