453 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...
CVE-2009-4429
Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...
CVE-2009-4429
Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...
CVE-2009-4429
CVE-2009-4429 is an XSS vulnerability in Drupal's Sections module. Affected: Sections module for Drupal 5.x (before 5.x-1.3) and 6.x (before 6.x-1.3). Condition: remote authenticated users with "administer sections" privileges can inject arbitrary script/HTML via the Name field. No exploitation o...
CVE-2009-4429: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...
Drupal Sections Module XSS Vulnerability
No description provided by source. The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides...
Drupal Sections Module XSS
The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides extensibility through various third...
Drupal Sections Module XSS Vulnerability
Exploit for unknown platform in category web applications ======================================== Drupal Sections Module XSS Vulnerability ======================================== The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability:...
SA-CONTRIB-2009-112 - Sections - Cross Site Scripting
The Sections module allows the creation of sections within a site. Each section has an installed template, theme or style attached to it. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Users who can take...
Drupal 6.14 With Sections 6.x-1.2 XSS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...
Drupal 6.14 with Sections 6.x-1.2 multiple XSS
Exploit for unknown platform in category web applications ============================================== Drupal 6.14 with Sections 6.x-1.2 multiple XSS ============================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at...
Drupal 6.14 with Sections 6.x-1.2 multiple XSS
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system...
Drupal Module Sections - Cross-Site Scripting
Drupal Module Sections - Cross-Site Scripting The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...
Drupal Module Sections - Cross-Site Scripting
The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides extensibility through various third...
bind security update
30:9.3.6-4.P1.1 - don't cache unvalidated additional sections 538744...
Sql injection
SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...
CVE-2008-6728
SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...
CVE-2008-6728
SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...
CVE-2008-6728: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...
blogplus 1.0 - Multiple Local File Inclusions
blogplus 1.0 - Multiple Local File Inclusions --:local file include:-- --------------------------------- script:blog+ v1.0 ---------------------------------------------- download from:http://www.ziddu.com/download/3151643/blogplusv1.0final.zip.html ----------------------------------------------...