5 matches found
CVE-2013-4598
The Groups, Communities and Co GCC module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors...
CVE-2013-4598
The CVE-2013-4598 issue affects the Drupal GCC (Groups, Communities and Co) module for Drupal 7.x, specifically versions 7.x-1.x prior to 7.x-1.1. The vulnerability arises because the GCC module does not properly enforce permissions, allowing remote attackers to access configuration pages via uns...
Code injection
The Groups, Communities and Co GCC module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors...
PT-2014-2844
Name of the Vulnerable Software and Affected Versions Drupal GCC module versions 7.x-1.x before 7.x-1.1 Description The issue allows remote attackers to access configuration pages due to improper permission checks. Recommendations For Drupal GCC module versions 7.x-1.x before 7.x-1.1, update to...
SA-CONTRIB-2013-091 - Groups, Communities and Co (GCC) - Access Bypass
This module enables you to manage groups and assign content and users to groups. The module doesn't sufficiently check permissions to some of the configuration pages allowing unprivileged users to access the roles and permissions pages of the GCC module. CVE identifiers issued CVE-2013-4598...