«
Expand/Collapse
278 items tagged "drupal"
Related tags:
media [+],
contact [+],
ckeditor [+],
ubercart [+],
node [+],
field [+],
denial of service [+],
cck [+],
cross site scripting [+],
cross [+],
taxonomy [+],
sql injection [+],
proof of concept [+],
language [+],
denial [+],
data [+],
xss [+],
webform [+],
version [+],
forms [+],
core [+],
contact forms [+],
code [+],
vulnerabilities [+],
sql [+],
search [+],
panels [+],
cms [+],
bugtraq [+],
zen [+],
x versions [+],
wishlist [+],
video version [+],
tool [+],
switcher [+],
supercron [+],
string [+],
smart [+],
slidebox [+],
slide module [+],
slide [+],
shell [+],
share [+],
service [+],
sensitive data [+],
search api [+],
save [+],
reorder [+],
remote shell [+],
recommendation [+],
realname [+],
read more [+],
read [+],
proof [+],
product keys [+],
product [+],
post [+],
permission access [+],
payflow link [+],
organic [+],
number 6 [+],
multiple [+],
malicious user [+],
login forms [+],
login attempts [+],
logic [+],
list [+],
link [+],
limit [+],
language icons [+],
java script [+],
janrain [+],
input validation [+],
input [+],
information disclosure [+],
icons [+],
hostmaster [+],
gazette edition [+],
fusion module [+],
fusion [+],
fivestar [+],
finder [+],
fckeditor [+],
fancy [+],
execution [+],
engage [+],
drupal themes [+],
drupal cms [+],
disclosure [+],
day [+],
data retention [+],
cumulus [+],
core functionality [+],
configuration interface [+],
command execution [+],
class names [+],
class [+],
chaos [+],
captcha [+],
buttons [+],
browserid [+],
breadcrumb [+],
block [+],
autosave [+],
attacker [+],
api [+],
alpha [+],
affiliate [+],
advertisement [+],
admin tools [+],
addressbook [+],
activity [+],
aberdeen [+],
forgery [+],
site [+],
third party [+],
txt [+],
spaces [+],
social [+],
remote [+],
printer [+],
path [+],
optimization [+],
multiblock [+],
menu version [+],
linkit [+],
internal [+],
information disclosure vulnerability [+],
grid [+],
glossify [+],
glossary [+],
gigya [+],
gallery [+],
email [+],
documentation version [+],
documentation [+],
creative commons [+],
creative [+],
copy [+],
control [+],
commons [+],
bundle [+],
automation [+],
arbitrary code execution [+],
version 6 [+],
wnage [+],
uri redirection [+],
secure [+],
search module [+],
private file [+],
poc [+],
persistent [+],
password [+],
pagers [+],
operations [+],
openid [+],
news [+],
latest stable release [+],
html [+],
fucks [+],
flotsam [+],
file upload [+],
file [+],
elephant [+],
date [+],
custom [+],
color [+],
carnal [+],
bulk [+],
book [+],
authentication [+],
attack [+],
advanced [+],
vulnerability [+],
module [+],
security advisory [+],
security [+],
secunia [+],
module versions [+],
advisory [+],
access [+],
code execution [+],
widget,
upload,
twitter,
security vulnerabilities,
script injection,
s mp3,
retired,
rc3,
itweak,
internationalization,
injection,
information,
imagefield,
function,
filefield,
export module,
drupalmp,
credential storage,
civiregister,
beta1
-
14:28
»
Packet Storm Security Advisories
Drupal Addressbook third party module version 6.x suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
-
14:28
»
Packet Storm Security Recent Files
Drupal Addressbook third party module version 6.x suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
-
14:28
»
Packet Storm Security Misc. Files
Drupal Addressbook third party module version 6.x suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
-
20:31
»
Packet Storm Security Advisories
The Drupal Fivestar module version 6.x suffers from an input validation vulnerability that allows a malicious user to improperly modify voting averages.
-
20:31
»
Packet Storm Security Recent Files
The Drupal Fivestar module version 6.x suffers from an input validation vulnerability that allows a malicious user to improperly modify voting averages.
-
20:31
»
Packet Storm Security Misc. Files
The Drupal Fivestar module version 6.x suffers from an input validation vulnerability that allows a malicious user to improperly modify voting averages.
-
-
22:30
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the Print module for Drupal, which can be exploited by malicious people to conduct cross-site scripting attacks.
-
18:11
»
Packet Storm Security Advisories
The Printer, Email and PDF third party module versions 6.x and 7.x for Drupal suffer from a cross site scripting vulnerability.
-
-
21:57
»
Packet Storm Security Exploits
This file documents a proof of concept to demonstrate the cross site scripting vulnerability in the Drupal Activity module version 6.x.
-
-
0:13
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the Wishlist module for Drupal, which can be exploited by malicious people to conduct cross-site scripting attacks.
-
-
21:03
»
Packet Storm Security Advisories
The Drupal Wishlist module versions 6.x and 7.x suffer from cross site request forgery and cross site scripting vulnerabilities.
-
-
23:37
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the Views Language Switcher module for Drupal, which can be exploited by malicious people to conduct cross-site scripting attacks.
-
20:00
»
Packet Storm Security Advisories
The Fancy Slide module in Drupal 6.x suffers from a cross site scripting vulnerability.
-
19:58
»
Packet Storm Security Advisories
CKEditor and FCKeditor modules in Drupal versions 6.x and 7.x suffer from PHP code execution, cross site request forgery, and cross site scripting vulnerabilities.
-
19:58
»
Packet Storm Security Recent Files
CKEditor and FCKeditor modules in Drupal versions 6.x and 7.x suffer from PHP code execution, cross site request forgery, and cross site scripting vulnerabilities.
-
19:58
»
Packet Storm Security Misc. Files
CKEditor and FCKeditor modules in Drupal versions 6.x and 7.x suffer from PHP code execution, cross site request forgery, and cross site scripting vulnerabilities.
-
7:44
»
Packet Storm Security Advisories
Various Drupal modules such as Content Lock, Ubercart Bulk Stock Updater, Ubercart Payflow Link, ticketyboo News Ticker, Admin tools, and Redirecting click bouncer suffer from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
-
7:44
»
Packet Storm Security Recent Files
Various Drupal modules such as Content Lock, Ubercart Bulk Stock Updater, Ubercart Payflow Link, ticketyboo News Ticker, Admin tools, and Redirecting click bouncer suffer from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
-
7:44
»
Packet Storm Security Misc. Files
Various Drupal modules such as Content Lock, Ubercart Bulk Stock Updater, Ubercart Payflow Link, ticketyboo News Ticker, Admin tools, and Redirecting click bouncer suffer from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
-
17:39
»
Packet Storm Security Advisories
The Read More Link module version 6.x in Drupal allows you to move the "Read more" link from the node's links area to the end of the teaser text. A user could inject java script into pages affecting other site users. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access administration pages."
-
17:39
»
Packet Storm Security Recent Files
The Read More Link module version 6.x in Drupal allows you to move the "Read more" link from the node's links area to the end of the teaser text. A user could inject java script into pages affecting other site users. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access administration pages."
-
17:39
»
Packet Storm Security Misc. Files
The Read More Link module version 6.x in Drupal allows you to move the "Read more" link from the node's links area to the end of the teaser text. A user could inject java script into pages affecting other site users. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access administration pages."
-
15:31
»
Packet Storm Security Advisories
The Drupal block class module allows users to add classes to any block through the block's configuration interface The class names in a block were not properly filtered. Someone with the ability to modify or create blocks could inject java script that would be rendered when viewing the block. Blockclass versions prior to 7.x-1.0 are affected.
-
15:31
»
Packet Storm Security Recent Files
The Drupal block class module allows users to add classes to any block through the block's configuration interface The class names in a block were not properly filtered. Someone with the ability to modify or create blocks could inject java script that would be rendered when viewing the block. Blockclass versions prior to 7.x-1.0 are affected.
-
15:31
»
Packet Storm Security Misc. Files
The Drupal block class module allows users to add classes to any block through the block's configuration interface The class names in a block were not properly filtered. Someone with the ability to modify or create blocks could inject java script that would be rendered when viewing the block. Blockclass versions prior to 7.x-1.0 are affected.
-
-
22:31
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the CDN module for Drupal, which can be exploited by malicious people to disclose sensitive information.
-
-
18:01
»
Packet Storm Security Advisories
Secunia Security Advisory - Multiple vulnerabilities have been reported in the Finder module for Drupal, which can be exploited by malicious people to conduct script insertion attacks.
-
-
15:30
»
Packet Storm Security Exploits
Drupal CKEditor versions 3.0 through 3.6.2 suffer from a persistent cross site scripting vulnerability that can be triggered by the addition of an event handler.
-
15:30
»
Packet Storm Security Recent Files
Drupal CKEditor versions 3.0 through 3.6.2 suffer from a persistent cross site scripting vulnerability that can be triggered by the addition of an event handler.
-
15:30
»
Packet Storm Security Misc. Files
Drupal CKEditor versions 3.0 through 3.6.2 suffer from a persistent cross site scripting vulnerability that can be triggered by the addition of an event handler.
-
-
7:58
»
Packet Storm Security Exploits
Drupal version 6.20 with String Overrides version 6.x-1.8 and Drupal version 5.21 with String Overrides version 5.x-1.8 suffer from a cross site scripting vulnerability.
-
7:58
»
Packet Storm Security Recent Files
Drupal version 6.20 with String Overrides version 6.x-1.8 and Drupal version 5.21 with String Overrides version 5.x-1.8 suffer from a cross site scripting vulnerability.
-
7:58
»
Packet Storm Security Misc. Files
Drupal version 6.20 with String Overrides version 6.x-1.8 and Drupal version 5.21 with String Overrides version 5.x-1.8 suffer from a cross site scripting vulnerability.
-
-
20:38
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the Hostmaster (Aegir) module for Drupal, which can be exploited by malicious people to conduct cross-site scripting attacks.
-
-
22:59
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the Views module for Drupal, which can be exploited by malicious people to conduct SQL injection attacks.
-
-
2:15
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the Certificate Login module for Drupal, which can be exploited by malicious people to conduct SQL injection attacks.
-
-
20:53
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the Node Invite module for Drupal, which can be exploited by malicious people to conduct cross-site scripting attacks.
-
-
22:39
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in the Addresses module for Drupal, which can be exploited by malicious people to conduct script insertion attacks.
-
-
0:53
»
Packet Storm Security Advisories
Secunia Security Advisory - Some vulnerabilities have been reported in the Mail Logger module for Drupal, which can be exploited by malicious people to conduct script insertion attacks.
-
-
15:22
»
Packet Storm Security Exploits
Drupal version 6.20 with Webform 6.x-2.10, Drupal version 7.0 with Webform 7.x-3.9, and Drupal with Webform 5.x-2.10 suffer from a cross site scripting vulnerability.
-
-
18:08
»
Carnal0wnage
Carnal0wnage/Attack Research Blog is back on blogspot. URL is still
http://carnal0wnage.attackresearch.com and
http://carnal0wnage.blogspot.com should redirect you to the right place. I doubt that RSS feeds will be so lucky though...you'll probably want to update your feeds.
Hopefully being back on blogger will allow for more and better discussions than on the drupal site and if the
blind elephant guy is working on an update, hopefully this fucks up his talk and he doesn't get to call us out this year b/c Drupal sucks to update/manage.
-CG
-
-
22:22
»
Packet Storm Security Advisories
Multiple Drupal themes suffer from cross site scripting and denial of service vulnerabilities. Affected themes include Fresh News, Inspire, Spectrum, Delegate, Optimize, Bueno, Headlines, Daily Edition, Coffee Break, The Gazette Edition.
-
22:22
»
Packet Storm Security Recent Files
Multiple Drupal themes suffer from cross site scripting and denial of service vulnerabilities. Affected themes include Fresh News, Inspire, Spectrum, Delegate, Optimize, Bueno, Headlines, Daily Edition, Coffee Break, The Gazette Edition.
-
22:22
»
Packet Storm Security Misc. Files
Multiple Drupal themes suffer from cross site scripting and denial of service vulnerabilities. Affected themes include Fresh News, Inspire, Spectrum, Delegate, Optimize, Bueno, Headlines, Daily Edition, Coffee Break, The Gazette Edition.
-
-
18:44
»
Packet Storm Security Advisories
Secunia Security Advisory - A weakness has been reported in the Node Quick Find module for Drupal, which can be exploited by malicious people to disclose potentially sensitive information.
-
-
4:22
»
Packet Storm Security Exploits
This is a proof of concept to demonstrate a logic security flow in the way Drupal CAPTCHA is used to protect login forms from bruteforce. If the CAPTCHA challenge is solved, the next login attempts can be issued without solving any new CAPTCHA challenge.
-
4:22
»
Packet Storm Security Recent Files
This is a proof of concept to demonstrate a logic security flow in the way Drupal CAPTCHA is used to protect login forms from bruteforce. If the CAPTCHA challenge is solved, the next login attempts can be issued without solving any new CAPTCHA challenge.
-
4:22
»
Packet Storm Security Misc. Files
This is a proof of concept to demonstrate a logic security flow in the way Drupal CAPTCHA is used to protect login forms from bruteforce. If the CAPTCHA challenge is solved, the next login attempts can be issued without solving any new CAPTCHA challenge.
-
-
0:44
»
Packet Storm Security Advisories
Secunia Security Advisory - Multiple vulnerabilities have been reported in the Views module for Drupal, which can be exploited by malicious people to conduct cross-site scripting attacks.