EUVD-2015-5470

Malware in sbrugna...

CVE-2015-5515

The Views Bulk Operations VBO module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing view with VBO...

CVE-2015-5515

The CVE-2015-5515 issue affects the Drupal contributed module Views Bulk Operations (VBO) on versions 6.x-1.x and 7.x-3.x prior to 7.x-3.3. The vulnerability arises when the bulk operation for changing Roles is enabled and a user with access to a user listing view (with VBO enabled) can remotely ...