EUVD-2012-4421

Malware in sbrugna...

CVE-2012-4492

Multiple cross-site scripting XSS vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the 1 report or 2 Custom Services...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the 1 report or 2 Custom Services...

CVE-2012-4492

Multiple cross-site scripting XSS vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the 1 report or 2 Custom Services...

CVE-2012-4492

Multiple cross-site scripting XSS vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the 1 report or 2 Custom Services...

CVE-2012-4492

The CVE-2012-4492 entry affects Drupal’s Shorten URLs module (versions 6.x-1.x prior to 6.x-1.13 and 7.x-1.x prior to 7.x-1.2). It describes cross-site scripting (XSS) vulnerabilities where remote authenticated users with certain permissions can inject arbitrary web script or HTML via unspecified...

PT-2012-5438

Name of the Vulnerable Software and Affected Versions Drupal Shorten URLs module versions 6.x-1.x before 6.x-1.13 Drupal Shorten URLs module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via...

CVE-2012-4492: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the 1 report or 2 Custom Services...

SA-CONTRIB-2012-121 - Shorten URLs - Cross Site Scripting (XSS)

The Shorten URLs module provides an API to shorten URLs via many services like bit.ly and TinyURL, as well as a block and a page that provide an interface for easily shortening URLs. Cross Site Scripting via report The module doesn't sufficiently sanitize user input when displaying shortened URLs...