EUVD-2014-8851

Malware in sbrugna...

Drupal Twilio Module Access Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP. twilio is one of the communication modules. An access bypass vulnerability exists in the Drupal Twilio module. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operation...

PT-2014-8793

Name of the Vulnerable Software and Affected Versions Twilio module versions 7.x-1.x through 7.x-1.8 Description The issue allows remote authenticated users to read and modify authentication tokens by leveraging the "access administration pages" Drupal permission, due to improper access restricti...