|
269291
|
- |
|
mcafee
|
mcafee_agent
|
Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent (MA) 5.x before 5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.
|
CWE-22
Path Traversal
|
CVE-2015-7237
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269292
|
- |
|
cp_reservation_calender_project
|
cp_reservation_calender
|
Multiple SQL injection vulnerabilities in dex_reservations.php in the CP Reservation Calendar plugin before 1.1.7 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) id…
|
CWE-89
SQL Injection
|
CVE-2015-7235
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269293
|
- |
|
structured_dynamics
|
open_semantic_framework
|
The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors.
|
CWE-20
Improper Input Validation
|
CVE-2015-7234
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269294
|
- |
|
structured_dynamics
|
open_semantic_framework
|
Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of adm…
|
CWE-352
Origin Validation Error
|
CVE-2015-7233
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269295
|
- |
|
structured_dynamics
|
open_semantic_framework
|
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology module is enabled, allows remote attackers to i…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7232
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269296
|
- |
|
drupalcommerce
|
commerce_commonwealth
|
The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, re…
|
CWE-20
Improper Input Validation
|
CVE-2015-7231
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269297
|
- |
|
workbench_email_project
|
workbench_email
|
The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and field validation by saving a node.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7230
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269298
|
- |
|
twitter_project
|
twitter
|
The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not properly check access permissions, which allows remote authenticated users to post tw…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7229
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269299
|
- |
|
restful_project
|
restful
|
The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using non-cookie authentication providers, which allows remote attackers to obtain sensi…
|
NVD-CWE-Other
|
CVE-2015-7228
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269300
|
- |
|
fieldable_panels_panes_project
|
fieldable_panels_panes
|
The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7227
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
