Lucene search
PRIOn knowledge basePRION:CVE-2015-2750HistorySep 13, 2017 - 4:29 p.m.
Open redirect
2017-09-1316:29:00
PRIOn knowledge base
www.prio-n.com
9
Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the “//” initial sequence.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| drupal | eq | 7.0 alpha5 | |
| drupal | eq | 7.0 dev | |
| drupal | eq | 7.0 alpha7 | |
| drupal | eq | 6.0 beta2 | |
| drupal | eq | 6.33 | |
| drupal | eq | 7.16 | |
| drupal | eq | 6.0 rc2 | |
| drupal | eq | 7.21 |
References
cgit.drupalcode.org/drupal/commit/includes/common.inc?h=7.x&id=b44056d2f8e8c71d35c85ec5c2fb8f7c8a02d8a8
cgit.drupalcode.org/drupal/commit/includes/menu.inc?h=6.x&id=8ffc5db3c0ab926f3d4b2cf8bc51714c8c0f3c93
www.debian.org/security/2015/dsa-3200
www.openwall.com/lists/oss-security/2015/03/26/4
www.securityfocus.com/bid/73219
www.drupal.org/SA-CORE-2015-001
Related
ubuntucve
ubuntucve
CVE-2015-2750
2017-09-13 00:00:00
nvd
nvd
CVE-2015-2750
2017-09-13 16:29:00
debiancve
debiancve
CVE-2015-2750
2017-09-13 16:29:00
cve
cve
CVE-2015-2750
2017-09-13 16:29:00
cvelist
cvelist
CVE-2015-2750
2017-09-13 16:00:00
nessus
nessus
Debian DSA-3200-1 : drupal7 - security update
2015-03-23 00:00:00
Drupal 6.x < 6.35 / 7.x < 7.35 Multiple Vulnerabilities
2016-04-08 00:00:00
Drupal 6.x < 6.35 / 7.x < 7.35 Multiple Vulnerabilities
2015-03-20 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3200-1)
2015-03-19 00:00:00
Mageia: Security Advisory (MGASA-2015-0121)
2022-01-28 00:00:00
Drupal Core Multiple Vulnerabilities (SA-CORE-2015-001) - Linux
2017-09-19 00:00:00
drupal
drupal
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2015-001
2015-03-18 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2015-03-28 00:12:10
ubuntu
ubuntu
Drupal vulnerabilities
2021-03-15 00:00:00
osv
osv
drupal7 vulnerabilities
2021-03-15 20:17:24
securityvulns
securityvulns
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00