27 matches found
EUVD-2015-4372
Malware in sbrugna...
EUVD-2015-4371
Malware in sbrugna...
Drupal Spider Contacts Module Cross-Site Request Forgery Vulnerability
Drupal is a free, open-source content management system developed in PHP.Spider Contacts is a contact component. A cross-site request forgery vulnerability exists in the Drupal Spider Contacts module that allows remote attackers to construct malicious URIs, trick users into parsing them, and can...
CVE-2015-4349
Cross-site request forgery CSRF vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors...
CVE-2015-4348
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors...
CVE-2015-4348
CVE-2015-4348 affects the Drupal Spider Contacts contributed module. The vulnerability is an SQL injection in the module that allows remote authenticated users possessing the "access Spider Contacts category administration" permission to execute arbitrary SQL via unspecified vectors. Root cause d...
CVE-2015-4349
Cross-site request forgery CSRF vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors...
CVE-2015-4348
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-4349
CVE-2015-4349 affects the Drupal Spider Contacts module. It is a Cross-Site Request Forgery (CSRF) vulnerability that enables an attacker to hijack administrator actions for requests that delete contact categories. The issue is tied to the Spider Contacts module (not Drupal core) and is mitigated...
CVE-2015-4348: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-4349: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors...
PT-2015-6531
Name of the Vulnerable Software and Affected Versions Drupal Spider Contacts module affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete contact categories. Recommendatio...
PT-2015-6530
Name of the Vulnerable Software and Affected Versions Drupal Spider Contacts module affected versions not specified Description A SQL injection issue in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to...
Multiple Cross-Site Request Forgery Vulnerabilities in Drupal Spider Contacts Module
Drupal is an open source content management platform. Multiple cross-site request forgery vulnerabilities exist in the Drupal Spider Contacts module, which could be exploited by an attacker to perform certain unauthorized actions and gain access to vulnerable applications...
Multiple SQL Injection Vulnerabilities in Drupal Spider Contacts Module
Drupal is an open source content management platform. Multiple SQL injection vulnerabilities exist in the Drupal Spider Contacts module, which could be exploited by attackers to compromise an application, access and modify data, or potentially exploit a vulnerability in the underlying database...
SA-CONTRIB-2015-057 - Spider Contacts - Multiple vulnerabilities - Unsupported
Spider Contacts module provides a user-friendly way to manage and display contacts. The module doesn't use Drupal's Database API properly, not sanitizing user input on SQL queries and thereby exposing a SQL Injection vulnerability. This vulnerability is mitigated by the fact that the attacker mus...
