Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2012-4500

Disclosure Date: October 31, 2012 (last updated October 05, 2023)
The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcements" permission to bypass node access restrictions and possibly have other unspecified impact.
0
0
Attacker Value
Unknown

CVE-2012-2298

Disclosure Date: August 14, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."
0
0
Attacker Value
Unknown

CVE-2012-2302

Disclosure Date: July 25, 2012 (last updated October 04, 2023)
Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2012-2711

Disclosure Date: June 27, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to inject arbitrary web script or HTML via vectors related to taxonomy information.
0
0
Attacker Value
Unknown

CVE-2012-2339

Disclosure Date: May 21, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."
0
0
Attacker Value
Unknown

CVE-2009-4524

Disclosure Date: December 31, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a realname (aka real name) element.
0
0