CVE-2012-5704

CVE-2012-5704 affects the Drupal Hotblocks module (6.x-1.x) prior to 6.x-1.8. The flaw allows remote authenticated users with the "administer hotblocks" permission to trigger a DoS by configuring a hotblock that references itself, causing an infinite loop/time‑out. The impact is a site denial of ...

SA-CONTRIB-2012-126 - Hotblocks - Cross Site Scripting (XSS) and Denial of Service (DoS)

The Hotblocks module provides an enhanced GUI for administering blocks and block content that is intended to be simpler and more controllable for less privileged users than the default block administration tools. Cross Site Scripting XSS The module doesn't sufficiently sanitize the user input for...