EUVD-2013-5772

Malware in sbrugna...

EUVD-2013-5771

Malware in sbrugna...

CVE-2013-5937

Cross-site request forgery CSRF vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API...

CVE-2013-5938

Cross-site scripting XSS vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form...

Cross site scripting

Cross-site scripting XSS vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API...

CVE-2013-5937

Cross-site request forgery CSRF vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API...

CVE-2013-5938

Cross-site scripting XSS vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form...

CVE-2013-5938

CVE-2013-5938 corresponds to a cross-site scripting (XSS) vulnerability in the Drupal Click2Sell Suite module 6.x-1.x. The vulnerability affects the module’s confirmation form handling, enabling remote attackers to inject arbitrary script/HTML. Public details from the Drupal security advisory SA-...

CVE-2013-5937

CVE-2013-5937 affects the Drupal Click2Sell Suite module (6.x-1.x). The CSRF vulnerability allows remote attackers to hijack administrator authentication for requests that delete database information via Drupal Form API vectors. Affected component is the Click2Sell Suite module; root cause is imp...

CVE-2013-5937: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API...

PT-2013-5878

Name of the Vulnerable Software and Affected Versions Click2Sell Suite module versions 6.x-1.x Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via a confirmation form. Recommendations For Click2Sell Suite module versions 6.x-1.x,...

CVE-2013-5938: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form...

PT-2013-5877

Name of the Vulnerable Software and Affected Versions Click2Sell Suite module versions 6.x-1.x Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that delete database information. This is achieved through vectors involving th...

SA-CONTRIB-2013-075 - Click2Sell - Multiple Vulnerabilities (XSS and CSRF)

Click2Sell is an Affiliate Marketing Network which lets you sell your products through their marketplace or on your website with buy it now buttons, and which also allows you to access hundreds of affiliates who want to sell your product for you and earn commission. Reflected Cross Site Scripting...