10 matches found
CVE-2014-9499
Cross-site scripting XSS vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal, when using the dblog module, allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message...
Cross site scripting
Cross-site scripting XSS vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal, when using the dblog module, allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message...
CVE-2014-9499
Cross-site scripting XSS vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal, when using the dblog module, allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message...
PT-2015-4247
Name of the Vulnerable Software and Affected Versions Godwin's Law module versions prior to 7.x-1.1 for Drupal Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message when the dblog module is used. This is due to a cross-site scripting...
CVE-2014-9499: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal, when using the dblog module, allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message...
CVE-2013-0325
Multiple cross-site scripting XSS vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a 1 Watchdog message or 2 admin setting...
CVE-2013-0325
Multiple cross-site scripting XSS vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a 1 Watchdog message or 2 admin setting...
CVE-2013-0325
Multiple cross-site scripting XSS vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a 1 Watchdog message or 2 admin setting...
PT-2013-2237
Name of the Vulnerable Software and Affected Versions Drupal Varnish module versions 6.x-1.x before 6.x-1.2 Drupal Varnish module versions 7.x-1.x before 7.x-1.0-beta2 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted 1 Watchdog message or 2 admin...
CVE-2013-0325: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a 1 Watchdog message or 2 admin setting...