14616 matches found
Mollom - Critical - Access bypass - SA-CONTRIB-2015-168
The Mollom module allows users to protect their website from spam. As part of the spam protection, Mollom enables the website administrator to create a blacklist. When content is submitted that matches terms on the black list it will be automatically marked as spam and rejected per the site...
Drupal UC Profile模块信息泄露漏洞
No description provided by source...
Drupal MAYO主题跨站脚本漏洞
No description provided by source...
Drupal MAYO theme cross-site scripting vulnerability
Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.MAYO theme is one of the modules that provides users with an easy way to define and create a theme of their choice. A cross-site scripting vulnerability exists in Drupal MAYO theme...
Drupal UC Profile Module Information Disclosure Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.UC Profile is one of the modules used to create and configure user profiles and files. An information disclosure vulnerability exists in the Drupal UC Profile module in versions 6.x-1.x...
Drupal Webform CiviCRM Integration模块跨站脚本漏洞
No description provided by source...
Drupal Stickynote模块跨站脚本漏洞（CNVD-2015-07318）
No description provided by source...
Drupal User Dashboard模块SQL注入漏洞
No description provided by source...
Drupal Field as Block模块信息泄露漏洞（CNVD-2015-07619）
No description provided by source...
Drupal Twilio模块访问绕过漏洞
No description provided by source...
Drupal web-fixtures\issue130.php 跨站脚本漏洞
No description provided by source...
Encrypt - Moderately Critical - Weak Encryption - SA-CONTRIB-2015-166
This module enables you to encrypt data within Drupal using a user-configurable encryption method and key provider. The module did not sufficiently validate good configurations and api usage resulting in multiple potential weaknesses depending on module usage. The default encryption method could...
Drupal Monster Menus模块信息泄露漏洞
No description provided by source...
CVE-2015-8233
Cross-site scripting XSS vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings...
CVE-2015-8232
The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings...
Design/Logic Flaw
The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors...
CVE-2015-8232
The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors...
CVE-2015-8232
CVE-2015-8232 affects the Drupal UC Profile module (6.x-1.x) prior to version 6.x-1.3. The vulnerability arises from incomplete access checks when accessing profiles, potentially allowing remote attackers to disclose sensitive information from anonymous user profiles via unspecified vectors. The ...
CVE-2015-8233
Cross-site scripting XSS vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings...