Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via improper normalization of URL paths in the rules. An attacker can gain unauthorized access to restricted files and perform unauthorized modifications by crafting requests with multiple leading slashes in the...

EUVD-2013-2019

Malware in sbrugna...

CVE-2013-2036

Cross-site scripting XSS vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files."...

CVE-2013-2036

Cross-site scripting XSS vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files."...

CVE-2013-2036

CVE-2013-2036 is a reflected Cross-Site Scripting (XSS) vulnerability in the Drupal Filebrowser module (6.x-2.x) prior to 6.x-2.2. The issue arises from insufficient sanitization when presenting lists of files, allowing an attacker to inject arbitrary script/HTML. The Drupal security advisory not...

Kohana v2.3.3 - Directory Traversal Vulnerability

Document Title: =============== Kohana v2.3.3 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=841 Release Date: ============= 2013-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 837 Commo...