EUVD-2012-1655

Malware in sbrugna...

CVE-2012-1645

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

PT-2017-13081

Name of the Vulnerable Software and Affected Versions Fastly CDN module for Magento2 versions prior to 1.2.26 Description The issue allows remote authenticated users to obtain sensitive information from authenticated sessions. This is possible when the Fastly CDN module is used with a third-party...

CVE-2017-13761: Exposure of Sensitive Information to an Unauthorized Actor

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses...

CVE-2012-1645

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

Code injection

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

CVE-2012-1645

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

CVE-2012-1645

The Drupal CDN module (versions 6.x-2.2 and 7.x-2.2) is affected when used in Origin Pull mode with the Far Future expiration option. The vulnerability allows remote attackers to read arbitrary PHP files from the site (demonstrated by reading settings.php) via unspecified vectors, due to how the ...

CVE-2012-1645

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

CVE-2012-1645: Exposure of Sensitive Information to an Unauthorized Actor

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

PT-2012-3409

Name of the Vulnerable Software and Affected Versions CDN module versions 6.x-2.2 and 7.x-2.2 for Drupal Description The issue allows remote attackers to read arbitrary PHP files via unspecified vectors when the CDN module is running in Origin Pull mode with the "Far Future expiration" option...

SA-CONTRIB-2012-022 - CDN - Information disclosure

CVE: CVE-2012-1645 The CDN module provides easy Content Delivery Network integration for Drupal sites. It alters file URLs, so that files are downloaded from a CDN instead of your web server. When running in Origin Pull mode together with the "Far Future expiration" option, the module contains a...