646 matches found
CVE-2015-4355
CVE-2015-4355 describes a CSRF vulnerability in the Drupal Watchdog Aggregator module. The flaw allows remote attackers to hijack administrator authentication to perform actions like enabling or disabling monitoring sites via unspecified vectors. The affected component is the Watchdog Aggregator ...
CVE-2015-4355
Cross-site request forgery CSRF vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors...
PT-2015-6537
Name of the Vulnerable Software and Affected Versions Drupal Watchdog Aggregator module affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that enable or disable monitoring sites...
CVE-2015-4355: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors...
Drupal Watchdog Aggregator Module Cross-Site Request Forgery Vulnerability
Drupal is an open source content management platform. A cross-site request forgery vulnerability exists in the Drupal Watchdog Aggregator module, which could be exploited by an attacker to perform an unauthorized operation or gain access to a vulnerable application...
SA-CONTRIB-2015-062 - Watchdog Aggregator - Cross Site Request Forgery (CSRF) - Unsupported
Watchdog Aggregator collects watchdog messages from external sites. The module doesn't sufficiently protect some URLs against CSRF. A malicious user can cause an administrator to enable and disable monitoring sites by getting their browser to make a request to a specially-crafted URL. CVE...
RSS-aggregator 1.0 admin/fonctions/supprimer_tag.php IdTag Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...
RSS-aggregator 1.0 admin/fonctions/supprimer_flux.php IdFlux Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...
RSS-aggregator 1.0 admin/fonctions/ Direct Request Administrator Authentication Bypass
No description provided by source. source: http://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...
Simplog <= 0.9.2 (s) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Simplog = 0.9.2 \s\ remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: intext:\Powered by simplog\r\n\r\n; if $argc5 echo Usage: php .$argv0. host...
Simplog 0.9.3.2 - Mutliple Vulnerabilities
No description provided by source. Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amo...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service loss of updates due to rate limit...
CVE-2012-0826
Cross-site request forgery CSRF vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service loss of updates due to rate limit...
CVE-2012-0826
CVE-2012-0826 is a CSRF vulnerability in Drupal’s Aggregator module affecting Drupal 6.x before 6.23 and 7.x before 7.11. The issue allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and may cause a denial of service via rate-limited updates...
CVE-2012-0826: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service loss of updates due to rate limit...
PT-2013-1516
Name of the Vulnerable Software and Affected Versions Drupal versions 6.x before 6.23 Drupal versions 7.x before 7.11 Description A cross-site request forgery CSRF issue exists in the Aggregator module, allowing remote attackers to hijack the authentication of victims for requests that update...
[SECURITY] Fedora 17 Update: kdepim-4.8.4-4.fc17
KDE PIM Personal Information Manager applications, including: akregator: feed aggregator blogilo: blogging application, focused on simplicity and usability kmail: email client knode: newsreader knotes: sticky notes for the desktop kontact: integrated PIM management korganizer: journal,...
FreeBSD : drupal -- multiple vulnerabilities (10720fe8-51e0-11e1-91c1-00215c6a37bb)
Drupal development team reports : Cross Site Request Forgery vulnerability in Aggregator module CVE: CVE-2012-0826 A CSRF vulnerability can force an aggregator feed to update. Since some services are rate-limited e.g. Twitter limits requests to 150 per hour this could lead to a denial of service...
CVE-2010-4520
Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...