11 matches found
EUVD-2009-3629
Malware in sbrugna...
EUVD-2007-5250
Malware in sbrugna...
CVE-2009-3654
Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...
Design/Logic Flaw
Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...
CVE-2009-3654
Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...
SA-CONTRIB-2009-068 - Boost - Filesystem Directory Creation
The Boost module provides a static file-based cache of Drupal pages for anonymous users. A vulnerability in the module allows an attacker to create new directories inside the webroot that the web server can write to. Existing directories cannot be changed using this vulnerability, but it can be...
Cross site scripting
Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks XSS via unspecified vectors...
CVE-2007-5270
Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks XSS via unspecified vectors...
CVE-2007-5270
Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks XSS via unspecified vectors...
CVE-2007-5270
CVE-2007-5270 affects Drupal via the Boost module prior to 4.7.x-1.0 and 5.x prior to 5.x-1.0. The vulnerability allows remote attackers to create or overwrite arbitrary files and perform cross-site scripting (XSS) through unspecified vectors. The available connected documents confirm the affecte...
SA-2007-022 - Boost - file overwrite
The Boost module provides a static file-based cache of Drupal pages for anonymous users. A vulnerability allows an attacker to create or overwrite any filename in any directory that the web server can write to. The affected file will always contain the fully rendered HTML for a single Drupal page...