EUVD-2012-4397

Malware in sbrugna...

CVE-2012-4468

Cross-site scripting XSS vulnerability in the Privatemsg module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a user name in a private message...

Cross site scripting

Cross-site scripting XSS vulnerability in the Privatemsg module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a user name in a private message...

CVE-2012-4468

Summary: CVE-2012-4468 is a cross-site scripting (XSS) vulnerability in the Drupal Privatemsg module. Affected software: Privatemsg 7.x-1.x before 7.x-1.3. Root cause: insufficient sanitization of the user name when creating private messages. Impact: remote attackers can inject arbitrary web scri...

CVE-2012-4468

Cross-site scripting XSS vulnerability in the Privatemsg module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a user name in a private message...

SA-CONTRIB-2012-104 - Privatemsg - Cross Site Scripting (XSS)

The Privatemsg module allows users to send private messages between to each other. The module doesn't sufficiently sanitize user names when creating messages. This vulnerability is mitigated by the fact that it is not possible to create insecure user names through the default user interface. The...

SA-CONTRIB-2010-080 - Privatemsg - Cross Site Scripting

The Privatemsg module allows to send private messages between users. The module does not properly escape user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Any user with permission to write private messages is vulnerable to attack. Versions affected...

Drupal Privatemsg Module Security Bypass Security Issue

No description provided by source. A security issue has been reported in the Privatemsg module for Drupal, which can be exploited by malicious users to bypass certain security restrictions. The security issue exists due to improper access permission checks in the Email Notification...

SA-CONTRIB-2010-038 - Privatemsg - Access bypass

The Privatemsg module allows to send private messages between users. Additionally, the sub module Privatemsg Email Notification sends e-mail notification when such a message is sent. The page to configure the template for these e-mails does not use the correct access permission which allows all...