17322 matches found
CVE-2012-1637
Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...
CVE-2012-1637
The CVE-2012-1637 vulnerability affects the Drupal Quick Tabs contributed module, not Drupal core. It is a Cross-Site Scripting (XSS) issue caused by insufficient filtering of user-supplied text. Affected versions are Quicktabs 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7....
CVE-2012-1637
Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...
CVE-2012-1637: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...
CVE-2012-2078: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Activity module 6.x-1.x for Drupal...
CVE-2012-2079: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF vulnerability in the Activity module 6.x-1.x for Drupal...
PT-2019-6753
Name of the Vulnerable Software and Affected Versions Drupal Activity module versions 6.x-1.x Description A cross-site scripting XSS issue exists in the Activity module for Drupal, which could potentially allow attackers to inject malicious scripts into websites. Recommendations For versions...
PT-2019-6754
Name of the Vulnerable Software and Affected Versions Activity module versions 6.x-1.x for Drupal Description A cross-site request forgery CSRF issue exists in the Activity module. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that t...
PT-2019-6752
Name of the Vulnerable Software and Affected Versions Drupal Quick Tabs module versions 6.x-2.x through 6.x-2.0 Drupal Quick Tabs module versions 6.x-3.x through 6.x-3.0 Drupal Quick Tabs module versions 7.x-3.x through 7.x-3.2 Description The issue is related to a cross-site scripting...
Unspecified Vulnerability in Drupal
Drupal is an open source content management system developed by the Drupal community using the PHP language. A security vulnerability exists in version 7.x prior to Drupal 7.5, which can be exploited by attackers to download files attached to comments...
CVE-2011-2726
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied...
Design/Logic Flaw
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied...
CVE-2011-2726
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied...
CVE-2011-2726
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied...
CVE-2011-2726
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied...
CVE-2011-2726
Removed by vendor...
CVE-2011-2726
Summary (CVE-2011-2726) : Drupal 7.x before 7.5 is affected by an access-bypass vulnerability related to file attachments in comments. If a site enables File upload fields on any entity or points fields to the private file directory, non-privileged users can download a file attached to a comment ...
CVE-2011-2726: Incorrect Authorization
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied...
PT-2019-6650
Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.5 Description An access bypass issue allows non-privileged users to download files attached to comments if they know or guess the direct URL of the file, even when the parent node is denied access. This issue is...