Piwik - Moderately Critical - Cross Site Scripting - SA-CONTRIB-2016-043

This module enables you to add integration with Piwik statistics service. The module allows admin users to enter custom JavaScript snippets to add advanced tracking functionality. The permission required to enter this JavaScript was not marked as restricted. This vulnerability is mitigated by the...

Google Analytics - Moderately Critical - Cross Site Scripting - SA-CONTRIB-2016-042

This module enables you to add integration with Google Analytics statistics service. The module allows admin users to enter custom JavaScript snippets to add advanced tracking functionality. The permission required to enter this JavaScript was not marked as restricted. This vulnerability is...

Administration Views - Critical - Access bypass - SA-CONTRIB-2016-041

Administration Views module replaces overview/listing pages with actual views for superior usability. The module does not check access properly under certain circumstances. Anonymous users could get access to read information they should not have access to. CVE identifiers issued ACVE identifier...

Drupal v6. 22 /content/menucustom parameters menupereid SQL injection vulnerability

No description provided by source...

Drupal Registration Codes Module Security Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Registration codes is one of the modules that provides users with a valid registration code when they register a new account on the site. A security bypass vulnerability exists in the...

Multiple vulnerabilities in Drupal Dropbox client module

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Dropbox client is one of the modules used by Drupal users to interact with the Dropbox API. Cross-site scripting vulnerabilities and security bypass vulnerabilities in versions 7.x-3.x ...

Multiple vulnerabilities in the Drupal Search API module

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Search API is one of the framework modules used to create search functionality for any Entity of Drupal. Information disclosure vulnerabilities, cross-site scripting vulnerabilities, an...

[SECURITY] Fedora 23 Update: drupal7-views-3.14-1.fc23

You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...

Drupal Coder Module Deserialization RCE

The version of Drupal running on the remote web server is affected by a remote code execution vulnerability in the Coder module, specifically in file coderupgrade.run.php, due to improper validation of user-supplied input to the unserialize function. An unauthenticated, remote attacker can exploi...

[SECURITY] Fedora 24 Update: drupal7-views-3.14-1.fc24

You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...

Drupal CODER Module Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploits a Remote Command Execution vulnerability in Drupal CODER...

Drupal RESTWS Remote Code Execution

A code execution vulnerability exists in Drupal RESTful Web Services RESTWS Module. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Drupal 7. x RESTWS module command execution vulnerability

No description provided by source...

Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

Exploit for php platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploits a...

Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

Drupal Module CODER 2.5 - Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploi...

Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploits a Remote Command Execution vulnerability in Drupal CODER...

Drupal Open Atrium Notifications Information Disclosure Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability in Drupal Open Atrium Notifications allows remote attackers to submit special requests to obtain sensitive information...

Drupal EPSA Crop - Image Cropping Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in Drupal EPSA Crop - Image Cropping, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Drupal Features Module Remote Denial of Service Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote denial of service vulnerability exists in the Drupal Features module, which could be exploited by remote attackers to submit a special request for a denial of...

Drupal Organic groups module access bypass vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Organic groups is one of the modules that allows users to create and manage their own groups. A security vulnerability exists in the Drupal Organic groups module that could be exploited...