Design/Logic Flaw

2009-02-1816:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

JSON

Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors.

CPENameOperatorVersion
semantically_interconnected_online_communitieseq<= 6.x-1.0
semantically_interconnected_online_communitieseq<= 5.x-1.0

CPE	Name	Operator	Version
	semantically_interconnected_online_communities	eq	<= 6.x-1.0
	semantically_interconnected_online_communities	eq	<= 5.x-1.0

References

secunia.com/advisories/32191

www.securityfocus.com/bid/31658

drupal.org/node/318749

exchange.xforce.ibmcloud.com/vulnerabilities/45762