EUVD-2012-1659

Malware in sbrugna...

EUVD-2012-1658

Malware in sbrugna...

CVE-2012-1648

Cross-site scripting XSS vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1649

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors...

CVE-2012-1649

CVE-2012-1649 affects the Drupal Cool Aid module prior to 6.x-1.9. The vulnerability is an access-control bypass that allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors. The root cause is insufficient access restriction enfor...

CVE-2012-1648

The CVE-2012-1648 issue affects the Drupal Cool aid module (6.x-1.x) prior to 6.x-1.9. The root cause is improper user input sanitization combined with insufficient access checks, allowing remote authenticated users with the administer coolaid permission to inject arbitrary script/HTML via unspec...

PT-2012-3413

Name of the Vulnerable Software and Affected Versions Cool Aid module versions prior to 6.x-1.9 for Drupal Description The issue concerns the Cool Aid module for Drupal, where access restrictions are not properly enforced. This allows remote authenticated users with the administer coolaid...

PT-2012-3412

Name of the Vulnerable Software and Affected Versions Drupal Cool Aid module versions prior to 6.x-1.9 Description The issue allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site...

CVE-2012-1648: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1649: Undefined Security Weakness

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors...