CVE-2012-2708

CVE-2012-2708 affects the Drupal-hosted Hostmaster (Aegir) module, specifically the 6.x-1.x line, with versions prior to 6.x-1.9. The vulnerability is an XSS in the _hosting_task_log_table function of hosting_task.module that allows remote authenticated users with certain permissions to inject ar...

CVE-2012-2707

CVE-2012-2707 affects the Hostmaster (Aegir) Drupal module (6.x-1.x) prior to 6.x-1.9. The issue is that the module does not properly exit when users lack access to package/task nodes, allowing remote attackers to bypass access restrictions and edit unauthorized nodes. This is a server-side acces...