Drupal Shipwire API Module Security Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. the Shipwire API is one of the modules responsible for communicating with the Shipwire Shipping Service. A security vulnerability in the Drupal Shipwire API module 7.x-1.03 prior to...

CVE-2015-5498

The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overview admin/shipwire/shipments, which allows remote attackers to obtain sensitive information via a request to the page...