Lucene search
+L

453 matches found

Prion
Prion
•added 2009/12/28 7:00 p.m.•19 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...

3.5CVSS5.8AI score0.02819EPSS
SaveExploits3References6Affected Software1
NVD
NVD
•added 2009/12/28 7:00 p.m.•31 views

CVE-2009-4429

Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...

3.5CVSS5.3AI score0.02819EPSS
SaveExploits3References6
Cvelist
Cvelist
•added 2009/12/28 6:27 p.m.•40 views

CVE-2009-4429

Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...

5.3AI score0.02819EPSS
SaveExploits3References6
CVE
CVE
•added 2009/12/28 6:27 p.m.•61 views

CVE-2009-4429

CVE-2009-4429 is an XSS vulnerability in Drupal's Sections module. Affected: Sections module for Drupal 5.x (before 5.x-1.3) and 6.x (before 6.x-1.3). Condition: remote authenticated users with "administer sections" privileges can inject arbitrary script/HTML via the Name field. No exploitation o...

3.5CVSS5.3AI score0.02819EPSS
SaveExploits3References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/28 12:00 a.m.•7 views

CVE-2009-4429: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...

3.5CVSS6AI score0.02819EPSS
SaveExploits3References2
seebug.org
seebug.org
•added 2009/12/16 12:00 a.m.•22 views

Drupal Sections Module XSS Vulnerability

No description provided by source. The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/12/16 12:00 a.m.•31 views

Drupal Sections Module XSS

The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides extensibility through various third...

SaveExploits0
zdt
zdt
•added 2009/12/16 12:00 a.m.•30 views

Drupal Sections Module XSS Vulnerability

Exploit for unknown platform in category web applications ======================================== Drupal Sections Module XSS Vulnerability ======================================== The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability:...

7.1AI score
SaveExploits0
Drupal
Drupal
•added 2009/12/16 12:00 a.m.•24 views

SA-CONTRIB-2009-112 - Sections - Cross Site Scripting

The Sections module allows the creation of sections within a site. Each section has an installed template, theme or style attached to it. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Users who can take...

6.3AI score
SaveExploits0References7
Packet Storm
Packet Storm
•added 2009/12/16 12:00 a.m.•34 views

Drupal 6.14 With Sections 6.x-1.2 XSS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...

0.1AI score
SaveExploits0
zdt
zdt
•added 2009/12/16 12:00 a.m.•27 views

Drupal 6.14 with Sections 6.x-1.2 multiple XSS

Exploit for unknown platform in category web applications ============================================== Drupal 6.14 with Sections 6.x-1.2 multiple XSS ============================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/12/16 12:00 a.m.•30 views

Drupal 6.14 with Sections 6.x-1.2 multiple XSS

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/12/16 12:00 a.m.•18 views

Drupal Module Sections - Cross-Site Scripting

Drupal Module Sections - Cross-Site Scripting The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/12/16 12:00 a.m.•98 views

Drupal Module Sections - Cross-Site Scripting

The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides extensibility through various third...

3.5CVSS5.8AI score0.02819EPSS
SaveExploits3
Oracle linux
Oracle linux
•added 2009/11/30 12:00 a.m.•48 views

bind security update

30:9.3.6-4.P1.1 - don't cache unvalidated additional sections 538744...

2.6CVSS7.3AI score0.07952EPSS
SaveExploits1
Prion
Prion
•added 2009/04/20 2:30 p.m.•28 views

Sql injection

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...

7.5CVSS9AI score0.01125EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2009/04/20 2:30 p.m.•34 views

CVE-2008-6728

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...

7.5CVSS8.3AI score0.01125EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2009/04/20 2:06 p.m.•38 views

CVE-2008-6728

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...

8.3AI score0.01125EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/20 12:00 a.m.•4 views

CVE-2008-6728: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...

7.5CVSS6.4AI score0.01125EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2009/03/26 12:00 a.m.•36 views

blogplus 1.0 - Multiple Local File Inclusions

blogplus 1.0 - Multiple Local File Inclusions --:local file include:-- --------------------------------- script:blog+ v1.0 ---------------------------------------------- download from:http://www.ziddu.com/download/3151643/blogplusv1.0final.zip.html ----------------------------------------------...

SaveExploits0
Rows per page
Query Builder