CVE-2012-2060: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Admin tools module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3775

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A cross-site request forgery CSRF issue exists in the Admin tools module, allowing remote attackers to hijack the authentication of victims. This is due to the module not checking tokens...