8 matches found
EUVD-2011-4486
Malware in sbrugna...
CVE-2011-4560
Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...
Cross site scripting
Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...
CVE-2011-4560
The Drupal Petition Node module (6.x-1.x) is vulnerable to a cross-site scripting (XSS) flaw in versions before 6.x-1.5. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the petition signing process. Affected product/version: Pe...
CVE-2011-4560
Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...
CVE-2011-4560: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...
PT-2011-4988
Name of the Vulnerable Software and Affected Versions Petition Node module versions 6.x-1.x before 6.x-1.5 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to...
SA-CONTRIB-2011-043 - Petition Node - Cross Site Scripting
Petition node module allows the creation of petition nodes to collect signatures to show support for a cause. The module contains a cross site scripting XSS vulnerability that can be exploited when signing a petition. This vulnerability is mitigated by the fact that it normally requires the 'sign...