Drupal共6篇
排序
CVE-2018-9205: Drupal avatar_uploader v7.x-1.0-beta8 – Local File Inclusion
漏洞标题 CVE-2018-9205: Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion 漏洞描述 In avatar_uploader v7.x-1.0-beta8 the view.php program doesn't restrict file path...
2018年10月13日 13:19CVE-2024-45440: Drupal 11.x-dev – Full Path Disclosure
漏洞标题 CVE-2024-45440: Drupal 11.x-dev - Full Path Disclosure 漏洞描述 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the ...
2024年11月29日 18:32CVE-2021-33829: Drupal 7 CKEditor XSS
漏洞标题 CVE-2021-33829: Drupal 7 CKEditor XSS 漏洞描述 CKEditor 4.14.0 through 4.16.x before 4.16.1 contains a reflected cross-site scripting caused by mishandling in comments, le...
2021年6月22日 00:52CVE-2014-3704: Drupal SQL Injection
漏洞标题 CVE-2014-3704: Drupal SQL Injection 漏洞描述 The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepar...
2014年11月25日 21:40CVE-2019-6340: Drupal – Remote Code Execution
漏洞标题 CVE-2019-6340: Drupal - Remote Code Execution 漏洞描述 Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 V contain certain field types that do not properly sanitiz...
2019年4月20日 21:15CVE-2014-3704: Drupal SQL Injection
漏洞标题 CVE-2014-3704: Drupal SQL Injection 漏洞描述 The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepar...
2014年5月20日 18:34
