16 matches found
EUVD-2014-8574
Malware in sbrugna...
EUVD-2012-3746
Malware in sbrugna...
EUVD-2012-2703
Malware in sbrugna...
CVE-2014-8743
Multiple cross-site scripting XSS vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via a 1 Role or 2 Organic Group name...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via a 1 Role or 2 Organic Group name...
CVE-2014-8743
Multiple cross-site scripting XSS vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via a 1 Role or 2 Organic Group name...
CVE-2014-8743
CVE-2014-8743 corresponds to XSS in the Drupal Maestro module (7.x-1.x) prior to 7.x-1.4. The root cause is improper filtering of Role or Organic Group names when shown in workflow details, allowing remote authenticated users with certain permissions to inject arbitrary script/HTML. Affected soft...
CVE-2012-3799
Multiple cross-site request forgery CSRF vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 change workflows or 2 insert cross-site scripting XSS sequences...
CVE-2012-2723
Cross-site scripting XSS vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 change workflows or 2 insert cross-site scripting XSS sequences...
CVE-2012-3799
Multiple cross-site request forgery CSRF vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 change workflows or 2 insert cross-site scripting XSS sequences...
CVE-2012-2723
CVE-2012-2723 affects the Drupal Maestro module (7.x-1.x) prior to 7.x-1.2. The root cause is insufficient filtering/validation of user-supplied data in the module’s admin screens, enabling XSS. The vulnerability requires a user with maestro admin permissions and allows remote authenticated users...
CVE-2012-3799
The CVE-2012-3799 entry concerns the Drupal Maestro module (7.x-1.x) prior to 7.x-1.2, where inadequate validation of user input in admin screens enabled CSRF and XSS, allowing an attacker to hijack administrator actions (including workflow changes) via authenticated sessions. The advisory confir...
CVE-2012-2723
Cross-site scripting XSS vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors...
SA-CONTRIB-2012-094 - Maestro module - Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS)
The Maestro module is a workflow engine/solution that facilitates simple and complex business process automation. The module doesn't sufficiently filter user-supplied data in its admin screens leading to a Cross Site Scripting XSS vulnerability. A Cross Site Request Forgery vulnerability in the...