Drupal 7. x RESTWS module command execution vulnerability

No description provided by source...

Drupal RESTWS Remote Code Execution

A code execution vulnerability exists in Drupal RESTful Web Services RESTWS Module. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploits a Remote Command Execution vulnerability in Drupal CODER...

Drupal Features Module Remote Denial of Service Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote denial of service vulnerability exists in the Drupal Features module, which could be exploited by remote attackers to submit a special request for a denial of...

Drupal Open Atrium Notifications Information Disclosure Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability in Drupal Open Atrium Notifications allows remote attackers to submit special requests to obtain sensitive information...

Drupal Views Megarow Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability in the Drupal Views Megarow module allows remote attackers to bypass security restrictions and perform unauthorized operations...

Drupal Fieldable Panels Panes (FPP) Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in Drupal Fieldable Panels Panes FPP, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Drupal EPSA Crop - Image Cropping Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in Drupal EPSA Crop - Image Cropping, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Drupal Organic groups module access bypass vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Organic groups is one of the modules that allows users to create and manage their own groups. A security vulnerability exists in the Drupal Organic groups module that could be exploited...

Drupal Module Coder 7.x-1.37.x-2.6 - Remote Code Execution

Drupal Module Coder 7.x-1.37.x-2.6 - Remote Code Execution array "coderupgrade" = array "module" = "color", "files" = array"color.module" , "extensions" = array"module", "items" = array array"olddir"="test; $cmd;", "newdir"="test", "paths" = array "modulesbase" = "../../../", "filesbase" =...

Drupal Module Coder < 7.x-1.3 / 7.x-2.6 - Remote Code Execution (SA-CONTRIB-2016-039)

Exploit for php platform in category remote exploits array "coderupgrade" = array "module" = "color", "files" = array"color.module" , "extensions" = array"module", "items" = array array"olddir"="test; $cmd;", "newdir"="test", "paths" = array "modulesbase" = "../../../", "filesbase" =...

Drupal Module Coder < 7.x-1.3/7.x-2.6 - Remote Code Execution

array "coderupgrade" = array "module" = "color", "files" = array"color.module" , "extensions" = array"module", "items" = array array"olddir"="test; $cmd;", "newdir"="test", "paths" = array "modulesbase" = "../../../", "filesbase" = "../../../../sites/default/files" ; $payload = serialize$a;...

Drupal Boost Module Information Disclosure Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Boost is one of the modules that improves the performance of a website by optimizing page caching of static files for anonymous users. An information disclosure vulnerability exists in...

Drupal Login one time 'Ajax Callback' module cross-site scripting vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. login one time is one of the modules used to send one-time login link emails to users. A cross-site scripting vulnerability exists in the Drupal Login one time module in versions 7.x-2...

Multiple vulnerabilities in Drupal HybridAuth Social Login module

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.HybridAuth Social Login is one of the modules that uses social network accounts to log in and register with the Drupal system. An information disclosure and open redirection vulnerabili...

Drupal Fast Autocomplete Module Remote Denial of Service Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Fast Autocomplete is one of the modules used to quickly create configurable view patterns. A remote denial of service vulnerability exists in version 7.x-1.x of the Drupal Fast...

Drupal Commerce Module Information Disclosure Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. commerce is one of the e-commerce modules. An information disclosure vulnerability exists in version 7.x-1.x of the Drupal Commerce module before 7.x-1.13. An attacker can exploit this...

Drupal Scald File Module Remote Code Execution Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Scald File is one of the modules used to handle multimedia. A remote code execution vulnerability exists in the Drupal Scald File module, version 7.x-1.x prior to 7.x-1.2. An attacker...

Multiple vulnerabilities in Drupal REST JSON module

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.REST JSON is one of the interface modules used to expose Drupal content. The Drupal REST JSON module version 7.x-1.x has a 1. security bypass vulnerability 2. user enumeration...

Drupal XML Sitemap Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. XML Sitemap is one of the modules that makes it easy for search engines to intelligently index Drupal. A cross-site scripting vulnerability exists in Drupal XML Sitemap versions 7.x-2....