CVE-2013-2158

Description

References

• osvdb.org/93980
• seclists.org/fulldisclosure/2013/Jun/23
• secunia.com/advisories/53649 · Vendor Advisory
• secunia.com/advisories/53661 · Vendor Advisory
• securityfocus.com/bid/60356
• drupal.org/node/2012366 · Vendor Advisory
• drupal.org/node/2012982 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/84791

services의 다른 취약점

• CVE-2015-4394보통 5.0The Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote attackers to bypass the field_access restriction and obtain sensitive p…
• CVE-2015-4393보통 6.0The resource/endpoint for uploading files in the Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote authenticated users with t…
• CVE-2014-9153보통 4.3Cross-site scripting (XSS) vulnerability in the Services module 7.x-3.x before 7.x-3.10 for Drupal allows remote authenticated users to inje…
• CVE-2014-9152높음 7.5The _user_resource_create function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user acc…
• CVE-2014-9151높음 7.5The Services module 7.x-3.x before 7.x-3.10 for Drupal does not properly limit the rate of authentication attempts, which makes it easier fo…