CVE-2009-4517

Cross-site request forgery CSRF vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that access unpublished content...

EUVD-2009-4500

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4517

The CVE-2009-4517 issue affects the Drupal module FAQ Ask (versions 5.x and 6.x prior to 6.x-2.0). It is a CSRF vulnerability that allows remote attackers to hijack the authentication of arbitrary users for requests accessing unpublished content. The vulnerability is network-exploitable with no r...

CVE-2009-4516

CVE-2009-4516 describes a cross-site scripting (XSS) vulnerability in the Drupal FAQ Ask module for 5.x and 6.x before 6.x-2.0. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is the Drupal FAQ Ask module (versions 5.x/6.x prior t...