Multiple vulnerabilities in Drupal Dropbox client module

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Dropbox client is one of the modules used by Drupal users to interact with the Dropbox API. Cross-site scripting vulnerabilities and security bypass vulnerabilities in versions 7.x-3.x ...

Multiple vulnerabilities in the Drupal Search API module

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Search API is one of the framework modules used to create search functionality for any Entity of Drupal. Information disclosure vulnerabilities, cross-site scripting vulnerabilities, an...

[SECURITY] Fedora 23 Update: drupal7-views-3.14-1.fc23

You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...

Drupal Coder Module Deserialization RCE

The version of Drupal running on the remote web server is affected by a remote code execution vulnerability in the Coder module, specifically in file coderupgrade.run.php, due to improper validation of user-supplied input to the unserialize function. An unauthenticated, remote attacker can exploi...

[SECURITY] Fedora 24 Update: drupal7-views-3.14-1.fc24

You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...

Drupal CODER Module Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploits a Remote Command Execution vulnerability in Drupal CODER...

Drupal 7. x RESTWS module command execution vulnerability

No description provided by source...

Drupal RESTWS Remote Code Execution

A code execution vulnerability exists in Drupal RESTful Web Services RESTWS Module. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

Exploit for php platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploits a...

Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

Drupal Module CODER 2.5 - Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploi...

Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploits a Remote Command Execution vulnerability in Drupal CODER...

Drupal Open Atrium Notifications Information Disclosure Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability in Drupal Open Atrium Notifications allows remote attackers to submit special requests to obtain sensitive information...

Drupal EPSA Crop - Image Cropping Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in Drupal EPSA Crop - Image Cropping, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Drupal Features Module Remote Denial of Service Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote denial of service vulnerability exists in the Drupal Features module, which could be exploited by remote attackers to submit a special request for a denial of...

Drupal Organic groups module access bypass vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Organic groups is one of the modules that allows users to create and manage their own groups. A security vulnerability exists in the Drupal Organic groups module that could be exploited...

Drupal Views Megarow Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability in the Drupal Views Megarow module allows remote attackers to bypass security restrictions and perform unauthorized operations...

Drupal Fieldable Panels Panes (FPP) Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in Drupal Fieldable Panels Panes FPP, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Drupal Module Coder < 7.x-1.3/7.x-2.6 - Remote Code Execution

array "coderupgrade" = array "module" = "color", "files" = array"color.module" , "extensions" = array"module", "items" = array array"olddir"="test; $cmd;", "newdir"="test", "paths" = array "modulesbase" = "../../../", "filesbase" = "../../../../sites/default/files" ; $payload = serialize$a;...

Drupal Module Coder 7.x-1.37.x-2.6 - Remote Code Execution

Drupal Module Coder 7.x-1.37.x-2.6 - Remote Code Execution array "coderupgrade" = array "module" = "color", "files" = array"color.module" , "extensions" = array"module", "items" = array array"olddir"="test; $cmd;", "newdir"="test", "paths" = array "modulesbase" = "../../../", "filesbase" =...

Drupal Module Coder < 7.x-1.3 / 7.x-2.6 - Remote Code Execution (SA-CONTRIB-2016-039)

Exploit for php platform in category remote exploits array "coderupgrade" = array "module" = "color", "files" = array"color.module" , "extensions" = array"module", "items" = array array"olddir"="test; $cmd;", "newdir"="test", "paths" = array "modulesbase" = "../../../", "filesbase" =...