PT-2020-7487

Name of the Vulnerable Software and Affected Versions: Organic Groups OG module versions 7.x-2.x before 7.x-2.3 for Drupal Description: The issue allows remote authenticated users to guess node IDs, subscribe to, and read the content of arbitrary private groups via unspecified vectors, due to the...

PT-2014-3259

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 7.x-2.x through 7.x-2.2 Description The issue allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field. Recommendations For Organic...

CVE-2013-7065: Undefined Security Weakness

The Organic Groups OG module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the oggroupref field...

PT-2012-6010

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 7.x-1.x through 7.x-1.4 Description The issue allows remote authenticated users to post to arbitrary groups by modifying their own account while a pending membership is waiting to be approved, due to improper...

CVE-2012-1644

The Organic Groups OG Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via unspecified vectors...

CVE-2012-1644: Undefined Security Weakness

The Organic Groups OG Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via unspecified vectors...

PT-2012-3408

Name of the Vulnerable Software and Affected Versions Organic Groups OG Vocabulary module versions 6.x-1.x through 6.x-1.1 Description The issue allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups. Recommendations For Organic Groups ...

CVE-2012-3800: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in og.js in the Organic Groups OG module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title...

PT-2012-5010

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 6.x-2.x before 6.x-2.4 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the og.js file in the Organic Groups OG module for Drupal when used in conjunction with the...

PT-2012-4211

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 6.x-2.x before 6.x-2.4 Description The issue arises from improper permission checks in the default views of the Organic Groups OG module when all users have the "access content" permission removed. This allows...

CVE-2009-4528: Undefined Security Weakness

The Organic Groups OG Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors...

CVE-2009-4063: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Subgroups for Organic Groups OG module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified node titles...

CVE-2009-3786: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Organic Groups OG Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title...