Drupal 6.x

• Advisory ID: DRUPAL-SA-CONTRIB-2015-059
• Project: Spider Video Player (third-party module)
• Version: 6.x, 7.x
• Date: 2015-February-25
• Security risk: 15/25 ( Critical) AC:None/A:None/CI:None/II:Some/E:Theoretical/TD:All
• Vulnerability: Access bypass, Cross Site Request Forgery, Multiple vulnerabilities

• Advisory ID: DRUPAL-SA-CONTRIB-2015-058
• Project: Spider Catalog (third-party module)
• Version: 6.x, 7.x
• Date: 2015-February-25
• Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
• Vulnerability: Cross Site Request Forgery

Hello everyone,

When I try to login to our drupal dashboard

http://www.website.com/q?=user/login

I get:

Site off-line

The site is currently not available due to technical problems. Please try again later. Thank you for your understanding.

If you are the maintainer of this site, please check your database settings in the settings.php file and ensure that your hosting provider's database server is running. For more help, see the handbook, or contact your hosting provider.

• Advisory ID: DRUPAL-SA-CONTRIB-2015-057
• Project: Spider Contacts (third-party module)
• Version: 6.x, 7.x
• Date: 2015-February-25
• Security risk: 20/25 ( Highly Critical) AC:Basic/A:None/CI:All/II:All/E:Theoretical/TD:All
• Vulnerability: Cross Site Request Forgery, SQL Injection, Multiple vulnerabilities

• Advisory ID: DRUPAL-SA-CONTRIB-2015-056
• Project: inLinks Integration (third-party module)
• Version: 6.x, 7.x
• Date: 2015-February-25
• Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
• Vulnerability: Cross Site Scripting

• Advisory ID: DRUPAL-SA-CONTRIB-2015-054
• Project: SMS Framework (third-party module)
• Version: 6.x
• Date: 2015-February-25
• Security risk: 15/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
• Vulnerability: Cross Site Scripting