EUVD-2012-2069

Malware in sbrugna...

Information disclosure

The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2012-2063

The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2012-2063

The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2012-2063

The Drupal Slidebox module (7.x) is vulnerable in 7.x-1.x up to 7.x-1.3 due to insufficient permission checks, allowing remote attackers to access content they should not see and disclose sensitive information. The Drupal security advisory SA-CONTRIB-2012-037 clarifies that the issue stems from i...

CVE-2012-2063: Undefined Security Weakness

The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2012-3777

Name of the Vulnerable Software and Affected Versions Drupal Slidebox module versions prior to 7.x-1.4 Description The issue allows remote attackers to obtain sensitive information due to improper permission checking. Recommendations For versions prior to 7.x-1.4, update to version 7.x-1.4 or lat...

CVE-2012-2063

The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified vectors...

SA-CONTRIB-2012-037 - Slidebox - access bypass

CVE: CVE-2012-2063 The Slidebox module allows webmasters do display a link to the next node in a jQuery box that slides in from the right side of the page after a user scrolls past a certain point. While the module checks for "published" status, the module does not contain sufficient usage of...