CVE-2015-1568

The CVE-2015-1568 entry concerns the Drupal GD Infinite Scroll contributed module, affected versions prior to 7.x-1.4. It describes a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of users who have the permission to edit GD Infinite Scro...

PT-2015-5357

Name of the Vulnerable Software and Affected Versions GD Infinite Scroll module versions prior to 7.x-1.4 for Drupal Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for request...

PT-2015-5356

Name of the Vulnerable Software and Affected Versions GD Infinite Scroll module versions prior to 7.x-1.4 Description The issue is related to a cross-site scripting XSS vulnerability in the admin page of the GD Infinite Scroll module for Drupal. This vulnerability allows remote authenticated user...

CVE-2015-1567: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenticated users with the "edit gd infinite scroll settings" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1568: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors...

SA-CONTRIB-2015-031 - GD Infinite Scroll - Multiple vulnerabilites

GD Infinite Scroll module enables you to use the "infinite scroll jQuery plugin : auto-pager" on custom pages. Some links were not protected against CSRF. A malicious user could cause another user with the "edit gd infinite scroll settings" permission to delete settings by getting his browser to...