CVE-2010-1548

概要

参考情報

• drupal.org/node/803944 · Patch
• seclists.org/fulldisclosure/2010/May/272
• secunia.com/advisories/39884 · Vendor Advisory
• madirish.net
• securityfocus.com/bid/40285 · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/58724

ctools のその他の脆弱性

• CVE-2015-7875高 7.5ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins tha…
• CVE-2015-6665中 4.3Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Dru…
• CVE-2015-4398中 5.8Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote atta…
• CVE-2015-4375中 4.3The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an au…
• CVE-2013-1925低 3.5The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authentic…