CVE-2012-2079

A cross-site request forgery CSRF vulnerability in the Activity module 6.x-1.x for Drupal...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in the Activity module 6.x-1.x for Drupal...

CVE-2012-1637

Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...

CVE-2012-2078

Cross-site scripting XSS vulnerability in the Activity module 6.x-1.x for Drupal...

Cross site scripting

Cross-site scripting XSS vulnerability in the Activity module 6.x-1.x for Drupal...

Cross site scripting

Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...

CVE-2012-2079

A cross-site request forgery CSRF vulnerability in the Activity module 6.x-1.x for Drupal...

CVE-2012-2079

The CVE-2012-2079 CSRF vulnerability affects the Drupal Activity module (6.x-1.x). The 6.x-1.x branch does not filter output correctly and does not confirm user intent when removing an activity, enabling unauthorized state-changing requests to the server. Impact details in public advisories descr...

CVE-2012-2078

Activity module 6.x-1.x (Drupal) is affected by a cross-site scripting (XSS) vulnerability due to output not being properly filtered, and an associated issue where removing an activity could trigger a cross-site request forgery (CSRF). Exploitation requires a user with the permissions to access a...

CVE-2012-2078

Cross-site scripting XSS vulnerability in the Activity module 6.x-1.x for Drupal...

CVE-2012-1637

The CVE-2012-1637 vulnerability affects the Drupal Quick Tabs contributed module, not Drupal core. It is a Cross-Site Scripting (XSS) issue caused by insufficient filtering of user-supplied text. Affected versions are Quicktabs 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7....

CVE-2012-1637

Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...

CVE-2012-1637

Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...

PT-2019-6753

Name of the Vulnerable Software and Affected Versions Drupal Activity module versions 6.x-1.x Description A cross-site scripting XSS issue exists in the Activity module for Drupal, which could potentially allow attackers to inject malicious scripts into websites. Recommendations For versions...

PT-2019-6754

Name of the Vulnerable Software and Affected Versions Activity module versions 6.x-1.x for Drupal Description A cross-site request forgery CSRF issue exists in the Activity module. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that t...

PT-2019-6752

Name of the Vulnerable Software and Affected Versions Drupal Quick Tabs module versions 6.x-2.x through 6.x-2.0 Drupal Quick Tabs module versions 6.x-3.x through 6.x-3.0 Drupal Quick Tabs module versions 7.x-3.x through 7.x-3.2 Description The issue is related to a cross-site scripting...

CVE-2012-2079: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in the Activity module 6.x-1.x for Drupal...

CVE-2012-2078: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Activity module 6.x-1.x for Drupal...

CVE-2012-1637: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability XSS in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal...

Unspecified Vulnerability in Drupal

Drupal is an open source content management system developed by the Drupal community using the PHP language. A security vulnerability exists in version 7.x prior to Drupal 7.5, which can be exploited by attackers to download files attached to comments...