CVE-2012-5545

Multiple cross-site scripting XSS vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2.5 for Drupal allow remote authenticated users with the "administer sharethis" permission to inject arbitrary web script or HTML via unspecified vectors related to "JavaScript settings."...

CVE-2012-5545: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2.5 for Drupal allow remote authenticated users with the "administer sharethis" permission to inject arbitrary web script or HTML via unspecified vectors related to "JavaScript settings."...

PT-2012-6016

Name of the Vulnerable Software and Affected Versions ShareThis module versions 7.x-2.x before 7.x-2.5 Description The issue allows remote authenticated users with the "administer sharethis" permission to inject arbitrary web script or HTML via unspecified vectors related to JavaScript settings...

SA-CONTRIB-2012-155 - ShareThis - Cross Site Scripting (XSS)

This module enables integration with the ShareThis web service to allow social bookmarking amongst your users. The module doesn't sufficiently filter JavaScript settings before outputting them. This vulnerability is mitigated by the fact that an attacker must have a role with the permission...

CVE-2012-2077

Cross-site request forgery CSRF vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."...

CVE-2012-2076

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."...

CVE-2012-2076

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2077

The Drupal ShareThis module (7.x-2.x) before 7.x-2.3 is affected by a CSRF vulnerability that lets an attacker hijack the authentication of users with the administer sharethis permission via vectors outside of the Form API. The root cause is that administrative settings could be affected outside ...

CVE-2012-2076

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2076

The CVE-2012-2076 issue affects the Drupal ShareThis module (7.x-2.x) prior to 7.x-2.3. The root cause is improper handling of the Form API in the administration forms, enabling an authenticated user with the administer sharethis permission to inject arbitrary web script or HTML (XSS) via unspeci...

CVE-2012-2077

Cross-site request forgery CSRF vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."...

CVE-2012-2077

Cross-site request forgery CSRF vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."...

CVE-2012-2076: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2077: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."...

PT-2012-3791

Name of the Vulnerable Software and Affected Versions Drupal ShareThis module versions 7.x-2.x before 7.x-2.3 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of users with administer ShareThis permissions. This occurs via unknown...

PT-2012-3790

Name of the Vulnerable Software and Affected Versions Drupal ShareThis module versions 7.x-2.x before 7.x-2.3 Description A cross-site scripting XSS issue exists in the administration forms of the ShareThis module, allowing remote authenticated users with administer ShareThis permissions to injec...

SA-CONTRIB-2012-049 - ShareThis - Multiple Vulnerablies

The XSS issue is CVE: CVE-2012-2076 The CSRF issue is CVE: CVE-2012-2077 The ShareThis module allows you to display social networking tools to users. The administration forms of the module do not properly use the Form API allowing a malicious user to inject unexpected settings, allowing for...