jetlib.sec » Full Disclosure » Drupal Finder Module Multiple Vulnerabilities

Feeds

133098 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 09, 2012
• 

  Drupal Finder Module Multiple Vulnerabilities

  Posted: February 9th, 2012, 6:05am PST

  Tags:   

  Posted by Justin Klein Keane on Feb 09

  Vulnerability Report
  
  Description of Vulnerability:
  -----------------------------
  Drupal (http://drupal.org) is a robust content management system (CMS)
  written in PHP and MySQL. The Drupal Finder module
  (https://drupal.org/project/finder) "allows Drupal site administrators
  to create flexible faceted search forms to find entities such as nodes
  or users based on the values of fields and database attributes." The
  Finder module contains...