exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 7 of 7

Files from Michael Hess

Drupal Tagadelic 6.x Information Disclosure

Posted Feb 5, 2014

Authored by Michael Hess | Site drupal.org

Drupal Tagadelic third party module version 6.x suffers from an information disclosure vulnerability.

tags | advisory, info disclosure

SHA-256 | 34450b5c7ab2e02cb75dbe9e1d9c4dd028ed9fe5af6b80ff5d4a9f318239bfc0

Download | Favorite | View

Drupal MRBS 6.x / 7.x CSRF / SQL Injection

Posted Jul 18, 2013

Authored by Michael Hess | Site drupal.org

Drupal MRBS third party module versions 6.x and 7.x suffer from cross site request forgery and remote SQL injection vulnerabilities.

tags | advisory, remote, vulnerability, sql injection, csrf

SHA-256 | b142181a17115a9d5fea3ecd0371961dc0b831c2b04c9cc9a0aa05db9b2f8020

Download | Favorite | View

Drupal Manager Change For Organic Groups 7.x Cross Site Scripting

Posted Feb 13, 2013

Authored by Michael Hess | Site drupal.org

Drupal Manager Change for Organic Groups third party module version 7.x suffers from a cross site scripting vulnerability.

tags | advisory, xss

SHA-256 | 1092203a418caa6f70f7b5d2b789a9c8f69de7004971b311f03f4d0d3a2df1a6

Download | Favorite | View

Drupal Announcements 6.x Access Bypass

Posted Aug 30, 2012

Authored by Michael Hess | Site drupal.org

The Drupal Announcements third party module version 6.x suffers from an access bypass vulnerability.

tags | advisory, bypass

SHA-256 | 006364398560d005b33fbf3a7d33da2de0f3e8e1ae6d3d5bb67df8a2aad7b7d9

Download | Favorite | View

Drupal cctags 6.x / 7.x Cross Site Scripting

Posted May 2, 2012

Authored by Michael Hess, Greg Knaddison | Site drupal.org

Drupal cctags third party module versions 6.x and 7.x suffer from a cross site scripting vulnerability.

tags | advisory, xss

SHA-256 | 11ecbee9842079b4c09e2b8895b9e82e8b925e6afe795af24ad7e05b1025e56c

Download | Favorite | View

Drupal Addressbook 6.x XSS / CSRF / SQL Injection

Posted May 2, 2012

Authored by Michael Hess | Site drupal.org

Drupal Addressbook third party module version 6.x suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

tags | advisory, remote, vulnerability, xss, sql injection, csrf

SHA-256 | 7994d736cf2e91b7252f62a8db4cd765bb6acd7196b0616a1b30cfe7d01070c4

Download | Favorite | View

Drupal CDN2 Video 6.x Cross Site Scripting / Cross Site Request Forgery

Posted Mar 29, 2012

Authored by Michael Hess | Site drupal.org

The Drupal CDN2 Video version 6.x suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | advisory, vulnerability, xss, csrf

SHA-256 | b14e348d6a46c47dca28df0e56d0c958c435da23181eee43b81ba8f5638a1b53

Download | Favorite | View