CVE-2012-5704

CVE-2012-5704 affects the Drupal Hotblocks module (6.x-1.x) prior to 6.x-1.8. The flaw allows remote authenticated users with the "administer hotblocks" permission to trigger a DoS by configuring a hotblock that references itself, causing an infinite loop/time‑out. The impact is a site denial of ...

CVE-2012-5705

CVE-2012-5705 concerns the Hotblocks Drupal contributed module (6.x-1.x prior to 6.x-1.8). The vulnerability is an XSS in the settings page (admin/settings/hotblocks) caused by insufficient sanitization of the block names input, allowing remote authenticated users with the administer hotblocks pe...