Drupal Campaign Monitor Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Campaign Monitor is one of the modules that integrates with the Campaign Monitor API to enable subscription to Drupal site management lists. A cross-site request forgery vulnerability...

SA-CONTRIB-2015-068 - Campaign Monitor - Cross Site Request Forgery (CSRF)

Campaign Monitor module integrates the Campaign Monitor API into Drupal. The module doesn't sufficiently protect some URLs against CSRF. A malicious user can cause another user to enable and disable list subscriptions by getting their browser to make a request to a specially-crafted URL. CVE...

Cross site scripting

Cross-site scripting XSS vulnerability in the administrative interface in the Campaign Monitor module before 6.x-2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this refers to an issue in an independently developed Drupal module, and NO...

CVE-2012-4484

Cross-site scripting XSS vulnerability in the administrative interface in the Campaign Monitor module before 6.x-2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this refers to an issue in an independently developed Drupal module, and NO...

CVE-2012-4484

Cross-site scripting XSS vulnerability in the administrative interface in the Campaign Monitor module before 6.x-2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this refers to an issue in an independently developed Drupal module, and NO...

CVE-2012-4484

The CVE-2012-4484 entry concerns a cross-site scripting (XSS) vulnerability in the Drupal Campaign Monitor module’s administrative interface, affecting the module before version 6.x-2.5. The root cause is an XSS flaw that could allow remote attackers to inject arbitrary web script or HTML via uns...

PT-2012-5430

Name of the Vulnerable Software and Affected Versions Campaign Monitor module for Drupal versions prior to 6.x-2.5 Description A cross-site scripting XSS issue exists in the administrative interface of the Campaign Monitor module for Drupal, allowing remote attackers to inject arbitrary web scrip...

CVE-2012-4484: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administrative interface in the Campaign Monitor module before 6.x-2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this refers to an issue in an independently developed Drupal module, and NO...

SA-CONTRIB-2012-114 - Campaign Monitor - Cross Site Scripting (XSS)

This module enables you to integrate Campaign Monitor into Drupal so you can give users the ability to subscribe and unsubscribe for your Campaign Monitor lists. The module doesn't sufficiently validate strings entered in the administration interface. This vulnerability is mitigated by the fact...