The update mechanism of the popular Drupal content management system is insecure in several ways, allowing attackers to trick administrators into installing malicious updates.

read more >>>

Source : PCAdvisor.Co.Uk