Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-2683

Malware in sbrugna...

2.6CVSS6.4AI score0.00295EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2012-2684

Malware in sbrugna...

5CVSS6.4AI score0.00357EPSS
Exploits1References6
OSV
OSV
added 2024/09/18 9:15 p.m.1 views

CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...

6.1CVSS5.8AI score0.00202EPSS
Exploits0References1
NVD
NVD
added 2012/08/31 8:55 p.m.10 views

CVE-2012-2704

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php...

5CVSS6AI score0.00357EPSS
Exploits1References5
Cvelist
Cvelist
added 2012/08/31 8:0 p.m.12 views

CVE-2012-2704

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php...

6AI score0.00357EPSS
Exploits1References5
CVE
CVE
added 2012/08/31 8:0 p.m.33 views

CVE-2012-2704

The CVE-2012-2704 issue concerns the Drupal Advertisement module (6.x-2.x) prior to 6.x-2.3 where debug information was not properly restricted, enabling remote attackers to obtain sensitive site configuration data defined by $conf in settings.php. This information disclosure is the primary impac...

5CVSS6.3AI score0.00357EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2012/06/27 12:0 a.m.41 views

CVE-2012-2703

CVE-2012-2703 describes an XSS vulnerability in the Drupal Advertisement module (versions 6.x-2.x prior to 6.x-2.3). When debug mode is enabled, an attacker could inject arbitrary script/HTML via the $conf variable in settings.php. Affected product: Drupal contributed Advertisement module for 6.x...

2.6CVSS5.8AI score0.00295EPSS
Exploits1References5Affected Software1
Drupal
Drupal
added 2012/05/16 12:0 a.m.19 views

SA-CONTRIB-2012-077 - Advertisement - Cross Site Scripting & Information Disclosure

XSS Issue: CVE: CVE-2012-2703. Access bypass: CVE: CVE-2012-2704 This module enables you to serve advertisements, define pools of ads and show certain ads on certain pages. The module could, under certain conditions, expose limited site configuration information and a debugging mode did not...

5CVSS5.1AI score0.00357EPSS
Exploits2References12
Drupal
Drupal
added 2009/02/11 12:0 a.m.11 views

SA-CONTRIB-2009-007 - Advertisement Cross-site scripting

The Advertisement module displays and tracks advertisements on Drupal websites. Unsanitized text is displayed in several places, allowing users with "administer advertisements" permissions to execute arbitrary code. Users with "administer advertisements" permissions have the ability to configure...

7.8AI score
Exploits0References5
Rows per page
Query Builder