14387 matches found
CVE-2016-7572
The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors...
CVE-2016-7571
CVE-2016-7571 is a Drupal XSS vulnerability affecting Drupal 8.x before 8.1.10. The issue allows remote attackers to inject arbitrary script or HTML via vectors related to handling HTTP exception messages. Documents corroborate the vulnerability under multiple sources (NVD entry, GHSA advisory, N...
CVE-2016-7571
Removed by vendor...
CVE-2016-7571
Cross-site scripting XSS vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception...
Drupal 6.22 - menupereid SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Drupal 6.22 - menupereid SQL injection Vulnerability Exploit Author : xBADGIRL21 Category: Webapps Tested on: Win | Linux Version: Drupal 6.22 Date: 2016/07/04 PoC: http://www.site.com/content/menucustom?menupereid=SQLi + test:...
Drupal 8 configuration file download vulnerability analysis-vulnerability warning-the black bar safety net
Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-22 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities,...
Drupal Core Access Bypass Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in Drupal versions 8.1.10-8.x, which can be exploited by an attacker to launch further attacks by executing arbitrary code and...
Drupal Core Cross-Site Scripting Vulnerability (CNVD-2016-08263)
Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Core that allows an attacker to steal cookie-based authentication credentials, obtain sensitive information, and execute arbitrary script code in the context of the...
Drupal 'Views' Module Access Bypass Vulnerability (SA-CORE-2016-002) - Linux
Drupal is prone to an access bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; ifdescription...
Drupal 'User' Module Privilege Escalation Vulnerability - Linux
Drupal is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...
Drupal 'Views' Module Access Bypass Vulnerability (SA-CORE-2016-002) - Windows
Drupal is prone to an access bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; ifdescription...
Drupal 'User' Module Privilege Escalation Vulnerability - Windows
Drupal is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...
Drupal 8 configuration file download vulnerability analysis-vulnerability warning-the black bar safety net
Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-22 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities,...
Drupal 8.0.x-dev Cross-Site Scripting Vulnerability
Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. A cross-site scripting vulnerability exists in Drupal 8.0.x-dev. Because filterxss fails to make effective...
Drupal Patches Three Vulnerabilities in Core Engine
Three vulnerabilities were patched Wednesday in the Drupal content management system’s core engine, two of which were rated critical, according to an advisory posted by the Drupal security team. Versions 8.x of the Drupal core are affected, and users are advised to upgrade to 8.1.10. Drupal is op...
[SECURITY] Fedora 24 Update: drupal7-google_analytics-2.3-1.fc24
Adds the Google Analytics web statistics tracking system to your website. This package provides the following Drupal module: googleanalytics...
[SECURITY] Fedora 24 Update: drupal7-panels-3.7-1.fc24
The Panels module allows a site administrator to create customized layouts for multiple uses. At its core it is a drag and drop content manager that lets you visually design a layout and place content within that layout. Integration with other systems allows you to create nodes that use this,...
Fedora 24 : drupal7-google_analytics (2016-df1252db90)
7.x-2.3 - Google Analytics - Moderately Critical - Cross Site Scripting - SA-CONTRIB-2016-042 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
Drupal Core Full config export configuration file unauthorized download vulnerability
Author: p0wd3r know Chong Yu 404 security lab 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities, one vulnerability...