Drupal Pubdlcnt 7.x-1.2 Open Redirection

Exploit Title : Drupal Pubdlcnt Modules 7.x-1.2 Public Download Count Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/02/2019 Vendor Homepage : drupal.org Software Download Links : ftp.drupal.org/files/projects/pubdlcnt-7.x-1.3.tar.gz...

CVE-2015-3389

Cross-site scripting XSS vulnerability in the Download counts report page in the Public Download Count module pubdlcnt 7.x-1.x-dev and earlier for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3389

Summary: CVE-2015-3389 affects the Drupal Public Download Count module (pubdlcnt). The vulnerability is an XSS in the Download counts report page in 7.x-1.x-dev and earlier due to insufficient sanitization, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified...