CVE-2012-1056

CVE-2012-1056 concerns the Drupal Forward module (6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3). The issue is improper permission checks for the Recent forwards, Most forwarded, and Dynamic blocks, enabling remote attackers to obtain node titles via unspecified vectors. The related Drupal S...

CVE-2012-1057

CVE-2012-1057 describes a CSRF vulnerability in the Forward module (Drupal) across 6.x-1.x and 7.x-1.x series, where the clickthrough tracking feature could be abused to hijack an administrator’s session and raise node rankings via tracking requests, potentially linked to inadequate flood control...