3 matches found
PT-2026-25856
Name of the Vulnerable Software and Affected Versions File Browser versions 2.61.2 and below Description File Browser, a file managing interface, has an issue where an authenticated user with Create or Rename permissions can bypass administrator-configured deny rules. This is due to the order in...
PT-2024-40299
Name of the Vulnerable Software and Affected Versions Drupal core affected versions not specified Description The issue allows malicious users to construct a URL that tricks users into being redirected to a 3rd party website, exposing them to potential social engineering attacks. This is possible...
CVE-2015-3342: Undefined Security Weakness
Open redirect vulnerability in the Ubercart Currency Conversion module before 6.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination query parameter...