ID de Prueba:	1.3.6.1.4.1.25623.1.0.808044
Categoría:	Web application abuses
Título:	Drupal 6.x < 6.38, 7.x < 7.43 Multiple Vulnerabilities (SA-CORE-2016-001) - Windows
Resumen:	Drupal is prone to multiple vulnerabilities.
Descripción:	Summary: Drupal is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - An improper validation of JSON-encoded content in system module. - The XML-RPC system allows a large number of calls to the same method. - An error in 'user_save' function in User module. Vulnerability Impact: Successful exploitation will allow remote attackers to cause brute force attacks, to download and execute JSON-encoded content and also to gain elevated privileges. Affected Software/OS: Drupal 6.x before 6.38 and 7.x before 7.43 on Windows. Solution: Upgrade to version 6.38 or 7.43 or later. CVSS Score: 8.5 CVSS Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3168 Debian Security Information: DSA-3498 (Google Search) http://www.debian.org/security/2016/dsa-3498 http://www.openwall.com/lists/oss-security/2016/02/24/19 http://www.openwall.com/lists/oss-security/2016/03/15/10 Common Vulnerability Exposure (CVE) ID: CVE-2016-3163 Common Vulnerability Exposure (CVE) ID: CVE-2016-3169
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.