14401 matches found
Drupal Page Manager Search Module Information Disclosure Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Page Manager Search is one of the modules that provides page search capabilities through the Drupal core search module. An information disclosure vulnerability exists in versions 7.x-1....
Multiple vulnerabilities in Drupal REST JSON module
Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.REST JSON is one of the interface modules used to expose Drupal content. The Drupal REST JSON module version 7.x-1.x has a 1. security bypass vulnerability 2. user enumeration...
Drupal RESTWS Module Remote PHP Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal RESTWS Module Remote PHP Code Execution', 'Description' = %q This module exploits a Remote PHP Code Execution vulnerability in Drupal RESTW...
drupal: proxy injection
Drupal 8 uses the third-party PHP library Guzzle for making server-side HTTP requests. An attacker can provide a proxy server that Guzzle will use. This vulnerability is called 'httpoxy'. httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments. It...
Drupal Opening Hours Module Cross-Site Scripting Vulnerability
Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. opening hours is one of the modules used to find stores or libraries that are open at a certain time. A cross-site scripting vulnerability exists in the Drupal Opening Hours module in...
Drupal Module RESTWS 7.x - PHP Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Drupal RESTWS Module 7.x Remote PHP Code Execution', 'Description' = %q This module exploits the Drupal RESTWS module...
Drupal Outline Designer Cross-Site Scripting Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Outline Designer is one of the user experience modules for library management. A cross-site scripting vulnerability exists in Drupal Outline Designer versions 7.x-2.x prior to 7.x-2.3,...
Drupal RESTWS RCE Vulnerability (SA-CONTRIB-2016-040) - Active Check
Drupal is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...
Drupal Module RESTWS 7.x - PHP Remote Code Execution (Metasploit)
Drupal Module RESTWS 7.x - PHP Remote Code Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Drupal RESTWS Module 7.x Remote PHP Code Execution',...
Drupal Module RESTWS 7.x - Remote PHP Code Execution (Metasploit)
Exploit for php platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Drupal RESTWS Module 7.x Remote PHP Code Execution', 'Description' = %q Th...
Drupal Coder RCE Vulnerability (SA-CONTRIB-2016-039) - Active Check
Drupal is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; if...
New Relic: XSS in a newrelic.com site
Hello, I found a XSS vulnerability that could be used by an attacker to execute javascript in the client, for example, an attacker could steal the cookie of the user or an attacker could redirect the client to an attacker site and try to exploit vulnerabilities against the browser. Here you can...
Drupal USASearch Module Access Bypass Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.USASearch is one of the theme search modules. An access bypass vulnerability exists in Drupal USASearch module versions prior to 7.x-5.1, which can be exploited by an attacker to bypass...
Multiple vulnerabilities in Drupal Node Notify module
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Node Notify is one of the node modules that allows registered users and anonymous users to subscribe. A cross-site scripting vulnerability and a cross-site request forgery vulnerability...
Drupal Hubspot CTA module cross-site scripting vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Hubspot CTA is one of the modules that displays the Hubspot CTA button by creating a Bean block. A cross-site scripting vulnerability exists in the Drupal Hubspot CTA module that can be...
Drupal FileField Module Remote Denial of Service Vulnerability
Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.FileField is one of the file upload components that uses the CCK feature extension. A remote denial of service vulnerability exists in versions 6.x-3.x of the Drupal FileField module...
Drupal Google Analytics Counter Cross-Site Request Forgery Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Google Analytics Counter is one of the website traffic analysis modules. A cross-site request forgery vulnerability exists in Drupal Google Analytics Counter versions prior to 7.x-3.2,...
Drupal Core - Highly Critical - Injection - SA-CORE-2016-003
More info at https://www.drupal.org/SA-CORE-2016-003...
