CVE-2017-9451

Cross site scripting XSS vulnerability in pages.editform.php in flatCore 1.4.6 allows remote attackers to inject arbitrary JavaScript via the PATHINFO in an acp.php URL, due to use of unsanitized $SERVER'PHPSELF' to generate URLs...

CVE-2017-9451

CVE-2017-9451 corresponds to a cross-site scripting (XSS) vulnerability in flatCore 1.4.6, affecting pages.edit_form.php. The issue arises from using unsanitized $_SERVER['PHP_SELF'] to generate URLs, allowing remote attackers to inject arbitrary JavaScript via the PATH_INFO in an acp.php URL. Th...

Drupal 7.x < 7.52 Multiple Vulnerabilites

Binary data 9820.prm...

Fedora Update for drupal7 FEDORA-2016-ff9a74c6dc

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Drupal Multiple Vulnerabilities (Dec 2016) - Linux

Drupal is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; ifdescription...

CVE-2016-9451

CVE-2016-9451 affects Drupal Core (Drupal 7.x) up to version 7.52. Root cause: a flaw in Confirmation forms that enables a remote authenticated user to perform open redirects via specially crafted URLs, potentially enabling phishing. Impact: open redirect to arbitrary sites; exploited by authenti...

[SECURITY] [DLA 715-1] drupal7 security update

Package : drupal7 Version : 7.14-2+deb7u15 CVE ID : CVE-2016-9449 CVE-2016-9451 Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/SA-CORE-2016-005. For Debian 7 "Wheezy",...

Drupal 7.x < 7.52 / 8.x < 8.2.3 Multiple Vulnerabilities

The version of Drupal running on the remote web server is 7.x prior to 7.52 or 8.x prior to 8.2.3. It is, therefore, affected by the multiple vulnerabilities : - An information disclosure vulnerability exists in the taxonomy module when using access query tags that are inconsistent with the...

Debian DSA-3718-1 : drupal7 - security update

Multiple vulnerabilities has been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/SA-CORE-2016-005 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005

Description Inconsistent name for term access query Less critical - Drupal 7 and Drupal 8 Drupal provides a mechanism to alter database SELECT queries before they are executed. Contributed and custom modules may use this mechanism to restrict access to certain entities by implementing...

CVE-2014-9451

VDG Security SENSE (formerly DIVA) 2.3.13 web service API /webservice has multiple stack-based buffer overflows in the AuthenticateUser API (user/password), enabling remote code execution. CVSSv2 base score 7.5 (HIGH). Some scanners mark remediation as WillNotFix; no explicit fixes detailed in th...

SuSE 11.3 Security Update : Samba (SAT Patch Number 9451)

"Samba has been updated to fix two security issues and one non-security issue. These security issues have been fixed : - Fix segmentation fault in smbdmarshaldirentry's SMBFINDFILEUNIXhandler. CVE-2014-3493 - Fix nmbd denial of service. CVE-2014-0244 - Fix malformed FSCTLSRVENUMERATESNAPSHOTS...