[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*


CVE-2013-6386
Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers, which uses predictable seeds and allows remote attackers to predict security strings and bypass intended restrictions via a brute force attack.

CVE-2013-6385
The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs form validation even when CSRF validation has failed, which might allow remote attackers to trigger application-specific impacts such as arbitrary code execution via application-speci ...

*OVAL
oval:org.secpod.oval:def:601180
CPE    80
cpe:/a:drupal:drupal:6.20
cpe:/a:drupal:drupal:6.21
cpe:/a:drupal:drupal:6.1
cpe:/a:drupal:drupal:6.22
...

© SecPod Technologies