EUVD-2012-2082

Malware in sbrugna...

EUVD-2012-5437

Malware in sbrugna...

EUVD-2012-2083

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2.5 for Drupal allow remote authenticated users with the "administer sharethis" permission to inject arbitrary web script or HTML via unspecified vectors related to "JavaScript settings."...

CVE-2012-5545

The CVE affects the Drupal ShareThis module (7.x-2.x) prior to 7.x-2.5. The vulnerability is an XSS in the handling of JavaScript settings due to insufficient filtering of output. Exploitation requires an authenticated user with the 'administer sharethis' permission. A fixed version is ShareThis ...

CVE-2012-2077

Cross-site request forgery CSRF vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."...

CVE-2012-2076

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2076

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2076

The CVE-2012-2076 issue affects the Drupal ShareThis module (7.x-2.x) prior to 7.x-2.3. The root cause is improper handling of the Form API in the administration forms, enabling an authenticated user with the administer sharethis permission to inject arbitrary web script or HTML (XSS) via unspeci...