Beschreibung
Multiple serious vulnerabilities have been found in Drupal modules. Malicious users can exploit these vulnerabilities to bypass security restrictions, inject arbitrary code or obtain sensitive information.
Below is a complete list of vulnerabilities
- Open redirect vulnerabilities in Commerce WeDeal, Node basket, Views and Node Invite modules can be exploited remotely via unspecified vectors;
- XSS vulnerabilities in Ajax Timeline, Facebook Album Fetcher, Public Download Count, Taxonomy Tools, Node Access Product, Taxonomy Path, Commerce Balanced Payments, Node basket, Quizzler, Node Invite, Taxonews, Classified Ads, Nodeauthor and Content Analysis modules can be exploited remotely via a specially designed parameters or other unknown vectors;
- Unknown vulnerability in Path Breadcrumbs module can be exploited remotely via a 403 page reading;
- CSRF vulnerabilities in Node basket, Feature Set, Shibboleth Authentication, Corner, Node Invite, Patterns, Alfresco and Contact Form Fields modules can be exploited remotely via an unspecified vectors;
- An improper access restrictions in Views module can be exploited remotely via an unknown vectors;
- Improper token generation in Amazon AWS module can be exploited remotely via an unspecified vectors.
Ursprüngliche Informationshinweise
CVE Liste
- CVE-2015-3393 high
- CVE-2015-3392 high
- CVE-2015-3391 high
- CVE-2015-3390 high
- CVE-2015-3389 high
- CVE-2015-3388 high
- CVE-2015-3387 high
- CVE-2015-3386 high
- CVE-2015-3385 high
- CVE-2015-3384 high
- CVE-2015-3383 high
- CVE-2015-3382 high
- CVE-2015-3381 high
- CVE-2015-3380 high
- CVE-2015-3379 high
- CVE-2015-3378 high
- CVE-2015-3376 high
- CVE-2015-3375 high
- CVE-2015-3374 high
- CVE-2015-3373 high
- CVE-2015-3372 high
- CVE-2015-3371 high
- CVE-2015-3370 high
- CVE-2015-3369 high
- CVE-2015-3368 high
- CVE-2015-3367 high
- CVE-2015-3366 high
- CVE-2015-3365 high
- CVE-2015-3364 high
- CVE-2015-3363 high
Mehr erfahren
Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com
Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!