325 matches found
CVE-2012-4474
Multiple cross-site scripting XSS vulnerabilities in the Colorbox Node module 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2012-4474
Multiple cross-site scripting XSS vulnerabilities in the Colorbox Node module 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2012-4474
CVE-2012-4474 : The Drupal contributed module Colorbox Node (7.x-2.x) is vulnerable to cross-site scripting (XSS) in versions prior to 7.x-2.2. The issue arises because the module did not adequately validate certain URL parameters before printing them to the browser, allowing an attacker to injec...
PT-2012-5422
Name of the Vulnerable Software and Affected Versions Colorbox Node module versions 7.x-2.x before 7.x-2.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, which can lead to cross-site scripting XSS attacks. Recommendations For...
CVE-2012-2730
The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly "protect node access when nodes are accessed outside of the standard node view," which allows remote attackers to bypass intended access restrictions...
CVE-2012-2730
CVE-2012-2730 affects the Drupal Protected Node module (6.x-1.x) prior to 6.x-1.6. The vulnerability allows remote attackers to bypass access restrictions by accessing nodes outside the standard node view due to insufficient protection of node access. Affected versions: Protected node 6.x-1.x bef...
CVE-2012-2730
The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly "protect node access when nodes are accessed outside of the standard node view," which allows remote attackers to bypass intended access restrictions...
PT-2012-4219
Name of the Vulnerable Software and Affected Versions Protected Node module versions 6.x-1.x through 6.x-1.5 Description The issue allows remote attackers to bypass intended access restrictions when nodes are accessed outside of the standard node view. Recommendations For Protected Node module...
SA-CONTRIB-2012-101 - Protected Node - Access Bypass
The Protected Node module enables users to use a password to restrict access to an individual node or all nodes of a node type. The module doesn't sufficiently protect node access when nodes are accessed outside of the standard node view i.e. node/1 is protected but other lists are not. CVE:...
CVE-2011-4560
Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...
Cross site scripting
Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...
CVE-2011-4560
Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...
CVE-2009-4518
Cross-site scripting XSS vulnerability in the Insert Node module 5.x before 5.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via an inserted node...
Cross site scripting
Cross-site scripting XSS vulnerability in the Insert Node module 5.x before 5.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via an inserted node...
CVE-2009-4518
CVE-2009-4518 affects Drupal’s Insert Node module 5.x before 5.x-1.2. It enables remote attackers to inject arbitrary web script or HTML via an inserted node, resulting in a cross-site scripting (XSS) vulnerability. The affected component is the Insert Node module (5.x line); the root cause is im...
CVE-2009-0817
Cross-site scripting XSS vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users with "administer site configuration" permissions to inject arbitrary web script or HTML via the Password page info field, which is...
CVE-2009-0817
This CVE concerns the Drupal Protected Node module. Affected: Protected Node module versions 5.x before 5.x-1.4 and 6.x before 6.x-1.5. Root cause: improper handling in the protected_node_enterpassword function allows an authenticated user with the site-configuration permission to inject arbitrar...
CVE-2009-0817
Cross-site scripting XSS vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users with "administer site configuration" permissions to inject arbitrary web script or HTML via the Password page info field, which is...
