CVE-2015-7234

The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors...

PT-2015-7484

Name of the Vulnerable Software and Affected Versions Drupal OSF module versions 7.x-3.x before 7.x-3.1 Description The issue allows user-assisted remote attackers to delete arbitrary files when the OSF Ontology and OSF Import modules are enabled. Recommendations For versions 7.x-3.x before...

PT-2015-7483

Name of the Vulnerable Software and Affected Versions Drupal OSF module versions 7.x-3.x before 7.x-3.1 Description A cross-site request forgery CSRF issue exists in the OSF module for Drupal. This issue allows remote attackers to hijack the authentication of administrators for requests that crea...

PT-2015-7482

Name of the Vulnerable Software and Affected Versions Drupal OSF module versions 7.x-3.x before 7.x-3.1 Description A cross-site scripting XSS issue exists in the administration pages of the OSF module for Drupal. This occurs when the OSF Ontology module is enabled, allowing remote attackers to...