PT-2015-6953

Name of the Vulnerable Software and Affected Versions Hostmaster Aegir module versions 6.x-2.x before 6.x-2.4 Hostmaster Aegir module versions 7.x-3.x before 7.x-3.0-beta2 Description The issue allows remote attackers to execute arbitrary PHP code via a crafted file in the directory used to write...

CVE-2015-5501: Undefined Security Weakness

The Hostmaster Aegir module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote attackers to execute arbitrary PHP code via a crafted file in the directory used to write Apache vhost files for hosted sites in a multi-site environment...

PT-2012-4199

Name of the Vulnerable Software and Affected Versions Hostmaster Aegir module versions 6.x-1.x through 6.x-1.8 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the hosting task log table function in the hosting task.module file. Remote authenticated users...

PT-2012-4198

Name of the Vulnerable Software and Affected Versions Drupal Hostmaster Aegir module versions 6.x-1.x through 6.x-1.8 Description The issue allows remote attackers to bypass intended access restrictions and edit unauthorized nodes due to the module not properly exiting when users do not have acce...

CVE-2012-2707: Undefined Security Weakness

The Hostmaster Aegir module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access restrictions and edit unauthorized nodes...

CVE-2012-2708: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the hostingtasklogtable function in modules/hosting/task/hostingtask.module in the Hostmaster Aegir module 6.x-1.x before 6.x-1.9 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a Drush log...