EUVD-2015-3428

Malware in sbrugna...

EUVD-2015-3427

Malware in sbrugna...

EUVD-2015-3426

Malware in sbrugna...

Drupal Node basket module open redirection vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Node basket is one of the modules that allows nodes to be selected from the current session store for payment operations. A security vulnerability exists in the Drupal Node basket modul...

CVE-2015-3383

Open redirect vulnerability in the Node basket module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2015-3382

Multiple cross-site request forgery CSRF vulnerabilities in the Node basket module for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that 1 add or 2 remove nodes from a basket via unspecified vectors...

CVE-2015-3381

Cross-site scripting XSS vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Node basket module for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that 1 add or 2 remove nodes from a basket via unspecified vectors...

Open redirect

Open redirect vulnerability in the Node basket module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3382

Multiple cross-site request forgery CSRF vulnerabilities in the Node basket module for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that 1 add or 2 remove nodes from a basket via unspecified vectors...

CVE-2015-3381

Cross-site scripting XSS vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3381

CVE-2015-3381 (Drupal Node basket module) describes a cross-site scripting (XSS) flaw in the Node basket module for Drupal. The vulnerability permits remote authenticated users to inject arbitrary web script or HTML via unspecified vectors due to insufficient input sanitization. Affected versions...

CVE-2015-3383

CVE-2015-3383 is a Drupal Node basket module open redirect vulnerability. The linked sources describe an open redirect issue (phishing risk) in the Node basket module and indicate that it affects all versions of the module. A remediation path is to uninstall or remove the Node basket module; othe...

CVE-2015-3382

Drupal Node basket module contains CSRF vulnerabilities that can allow an attacker to hijack user sessions to add or remove nodes from a basket. Affected across versions prior to the fixes noted in the Drupal advisory; vectors are not detailed in the provided documents. Mitigation referenced: upd...

PT-2015-6202

Name of the Vulnerable Software and Affected Versions Drupal Node basket module affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of arbitrary users for...

PT-2015-6203

Name of the Vulnerable Software and Affected Versions Drupal Node basket module affected versions not specified Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. This is achieved through unspecified vectors in the Node...

CVE-2015-3382: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Node basket module for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that 1 add or 2 remove nodes from a basket via unspecified vectors...

CVE-2015-3383: Undefined Security Weakness

Open redirect vulnerability in the Node basket module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2015-3381: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...