CVE-2012-2303

The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the 1 Spaces or 2 Spaces OG module...

CVE-2012-2303: Undefined Security Weakness

The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the 1 Spaces or 2 Spaces OG module...

CVE-2012-3800: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in og.js in the Organic Groups OG module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title...

PT-2012-4211

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 6.x-2.x before 6.x-2.4 Description The issue arises from improper permission checks in the default views of the Organic Groups OG module when all users have the "access content" permission removed. This allows...

CVE-2012-3800

The vulnerability CVE-2012-3800 affects the Organic Groups module for Drupal (6.x-2.x) prior to 6.x-2.4 when used with the Vertical Tabs module. The issue is an XSS in og.js that allows remote authenticated users to inject arbitrary script or HTML via the group title. The Drupal security advisory...

CVE-2012-2721

The CVE-2012-2721 issue affects the Organic Groups module for Drupal 6.x, specifically versions prior to 6.x-2.4. The vulnerability arises because the module’s default views do not properly enforce Drupal core permissions when all users have the 'access content' permission removed, enabling remot...

PT-2012-5010

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 6.x-2.x before 6.x-2.4 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the og.js file in the Organic Groups OG module for Drupal when used in conjunction with the...

Fedora 17 : drupal6-og-2.3-1.fc17 (2012-7259)

Upstream security update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for drupal6-og FEDORA-2012-7293

Check for the Version of drupal6-og OpenVAS Vulnerability Test Fedora Update for drupal6-og FEDORA-2012-7293 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for drupal6-og FEDORA-2012-7293

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : drupal6-og-2.3-1.fc16 (2012-7293)

Upstream security update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 16 Update: drupal6-og-2.3-1.fc16

Enable users to create and manage their own 'groups'...

SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass

CVE: CVE-2012-2303 Spaces is an API module intended to make configuration options generally avaliable only at the sitewide level to be configurable and overridden by individual "spaces" on a Drupal site. The spaces and spacesog modules part of the spaces package in some cases do not apply the...

SA-CONTRIB-2011-047 - OG Features access bypass

OG Features provides a mechanism for groups to enable or disable certain bundles of functionality, of features, within the groups they administer. The module is able to turn components on and off within given groups by overriding the access callbacks of every menu item, and checking conditions...

Drupal OG Menu Module XSS Vulnerability

No description provided by source. OG Menu 6.x-2.0 XSS Vulnerability CVE-2010-1747 This disclosure has also been posted at http://madirish.net/?article=467 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in P...

SA-CONTRIB-2010-073 - Multiple Vulnerabilities In Multiple Contributed Modules

Versions affected and proposed solutions Simple Gallery for Drupal 6.x This module creates a simple gallery using taxonomy and CCK imagefields. The module is vulnerable to a Cross Site Scripting XSS attack. This can be exploited by users with the ability to add taxonomy terms or tag content...

CVE-2009-4528

The CVE-2009-4528 entry concerns Drupal’s Organic Groups (OG) Vocabulary module, version 6.x before 6.x-1.0. The vulnerability allows remote authenticated group members to bypass access restrictions and to create, modify, or read vocabulary items via unspecified vectors. Affected software: Organi...

CVE-2009-4528: Undefined Security Weakness

The Organic Groups OG Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors...

CVE-2009-4063

The vulnerability CVE-2009-4063 affects Drupal’s Subgroups for Organic Groups (OG) module for Drupal 5.x. Specifically, versions before 5.x-4.0 and before 5.x-3.4 are vulnerable in OG’s handling of node titles, allowing remote attackers to inject arbitrary script/HTML via node titles (XSS). The a...

CVE-2009-4063: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Subgroups for Organic Groups OG module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified node titles...