Lucene search
+L

388 matches found

Positive Technologies
Positive Technologies
•added 2012/11/30 12:00 a.m.•3 views

PT-2012-5424

Name of the Vulnerable Software and Affected Versions Drag & Drop Gallery module versions 6.x Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For Drag & Drop Gallery module version 6.x, update to a newer versio...

4.3CVSS0.00931EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/30 12:00 a.m.•8 views

CVE-2012-4472: Undefined Security Weakness

Unrestricted file upload vulnerability in upload.php in the Drag & Drop Gallery module 6.x-1.5 and earlier for Drupal allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the...

5.1CVSS6.4AI score0.01448EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/30 12:00 a.m.•4 views

CVE-2012-4476: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.00931EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/30 12:00 a.m.•4 views

CVE-2012-4478: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to hijack the authentication of administrators...

6.8CVSS5.9AI score0.0057EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/30 12:00 a.m.•5 views

CVE-2012-4479: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS6.4AI score0.0113EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2012/06/25 12:00 a.m.•50 views

Drupal Drag And Drop 6.x-1.5 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2012/06/25 12:00 a.m.•29 views

Drupal Module Drag Drop Gallery 6.x-1.5 - upload.php Arbitrary File Upload

Drupal Module Drag Drop Gallery 6.x-1.5 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54179/info Drag & Drop Gallery is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

SaveExploits0
zdt
zdt
•added 2012/06/24 12:00 a.m.•44 views

Drupal Modules - Drag & Drop Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score
SaveExploits0
OSV
OSV
•added 2012/02/16 8:55 p.m.•13 views

UBUNTU-CVE-2011-3023

Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to drag-and-drop operations...

6.8CVSS7.4AI score0.00907EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2012/02/13 12:00 a.m.•35 views

Yahoo! Messenger 11.5 Buffer Overflow

No description provided by source. Title: ====== Yahoo! Messenger v11.5 - Buffer Overflow Vulnerability Date: ===== 2012-02-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=434 VL-ID: ===== 434 Introduction: ============= Der Yahoo Messenger eigene Schreibung Yahoo!...

7.1AI score
SaveExploits0
CVE
CVE
•added 2011/10/04 10:00 a.m.•51 views

CVE-2011-3980

Technical details about CVE-2011-3980 are not publicly provided in the connected documents. The materials reference TYPO3 Drag Drop Mass Upload extension 2.0.2 and earlier and arbitrary file upload, but do not specify vectors or root cause. Monitor for updates.

7.5CVSS7.1AI score0.01371EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/04 12:00 a.m.•6 views

CVE-2011-3980: Undefined Security Weakness

Unspecified vulnerability in the Drag Drop Mass Upload ameosdragndropupload extension 2.0.2 and earlier for TYPO3 allows remote attackers to upload arbitrary files via unknown vectors...

7.5CVSS6AI score0.01371EPSS
SaveExploits0References1
rdot
rdot
•added 2010/12/27 12:00 a.m.•22 views

Hack Record Book

Записная книга для хранения и обработки найденных на сайтах уязвимостей. Можно сохранить: + Ссылку. + Описание уязвимости. + ТИЦ, PR можно узнать автоматически. + Alexa rate. + Google indexed|not filtered pages count. + Дату и время записи. + Рейтинг уязвимости. + Ваши личные заметки по данному...

7.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/06/09 12:00 a.m.•35 views

iClone - SQL Injection

iClone - SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iClone SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.reallusion.com/iclone/ Platform: Windows Price:$199 Author :...

0.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/06/08 5:03 a.m.•22 views

Stack-Based Buffer Overflow Vulnerability in Collaboration Common Utility

Overview Collaboration Common Utility, a component of multiple Hitachi products, is vulnerable to stack-based buffer overflow when the Drag and Drop Component for Collaboration feature is also installed. Impact No details available. Solution Please refer to the 'Vendor Information' section for th...

10CVSS7.4AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/05/28 6:30 p.m.•39 views

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

7.5CVSS6AI score0.01164EPSS
SaveExploits1References1
Prion
Prion
•added 2010/05/28 6:30 p.m.•30 views

Code injection

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

7.5CVSS7.6AI score0.01164EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2010/05/28 6:00 p.m.•41 views

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

7AI score0.01164EPSS
SaveExploits1References3
Mend
Mend
•added 2010/05/28 6:00 p.m.•3 views

CVE-2010-2109

Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service memory error or possibly have unspecified other impact via vectors related to the "drag + drop" functionality...

7.5CVSS0.01164EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2010/05/28 6:00 p.m.•46 views

CVE-2010-2109

Removed by vendor...

7.5CVSS6.7AI score0.01164EPSS
SaveExploits1
Rows per page
Query Builder