CVE-2013-2198

The CVE-2013-2198 entry concerns Drupal’s Login Security module (6.x-1.x prior to 6.x-1.3 and 7.x-1.x prior to 7.x-1.3) where attackers can bypass intended restrictions by supplying a crafted username. The underlying issue is an incorrect use of string filtering in the module which can cause it t...

CVE-2013-2197

CVE-2013-2197 affects Drupal’s Login Security module. The vulnerability, triggered when the login delay feature is enabled, allows a remote attacker to cause a denial of service via a high volume of failed login attempts, consuming CPU. Affected are Drupal 6.x-1.x before 6.x-1.3 and 7.x-1.x befor...