CVE-2014-5169

Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...

CVE-2014-5169

Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...

CVE-2014-5169

CVE-2014-5169 is a Cross‑Site Scripting (XSS) vulnerability in the Drupal Date module before 7.x-2.8. It allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title. Impact is partial integrity (I:P) with no confiden...

Fedora 19 : drupal7-date-2.8-1.fc19 (2014-9087)

Update to upstream 2.8 release, due to security fix for CVE-2014-5169 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 20 : drupal7-date-2.8-1.fc20 (2014-9052)

Update to upstream 2.8 release due to security fix for CVE-2014-5169 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Stark CRM 1.0 Script Injection / Session Riding

Stark CRM v1.0 Multiple Script Injection And Session Riding Vulnerabilities Vendor: IWCn Systems Inc. Product web page: http://www.iwcn.ws Affected version: 1.0 Summary: This is a light weight CRM which simplifies process of managing staff, client and projects. Desc: Multiple stored XSS and CSRF...

Stark CRM 1.0 - Multiple Vulnerabilities

Stark CRM 1.0 - Multiple Vulnerabilities Stark CRM v1.0 Multiple Script Injection And Session Riding Vulnerabilities Vendor: IWCn Systems Inc. Product web page: http://www.iwcn.ws Affected version: 1.0 Summary: This is a light weight CRM which simplifies process of managing staff, client and...