Website

Everything concerning this Website

Drupal Module with holes

The Drupal Site Documentation Module [1] bears a Security Sole that allows access to sensitive Data of your Drupal Installation says Secunia [2] and Drupal.org [3].

This Module displays Content of arbitrary Tables of Drupal's Database. This can be misused to get the Session-IDs of logged-in Users as well as Usernames, hashed Passwords and E-Mail Adresses.

Syndicate content