CVE-2016-3188

The prepopulaterequestwalk function in the Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the 1 actions, 2 container, 3 token, 4 password, 5 passwordconfirm, 6 textformat, or 7 markup field type, and consequently have unspecified impact, via unspecified...

PT-2016-5406

Name of the Vulnerable Software and Affected Versions Drupal Prepopulate module versions 7.x-2.x before 7.x-2.1 Description The issue in the Prepopulate module allows remote attackers to modify certain fields, including actions, container, token, password, password confirm, text format, and marku...

Drupal Prepopulate module security bypass vulnerability (CNVD-2016-01737)

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. prepopulate is one of the prepopulated field modules. A security vulnerability exists in Drupal Prepopulate due to the program's failure to restrict users from overriding any portion o...