Vulnerabilities

TI-2012-01834 CVE-2012-2061 · GHSA-5jxm-f54p-34xg

Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00746 Published 2012-09-17 No fix listed CWE-352

TI-2012-01833 CVE-2012-2060 · GHSA-jrg6-fc48-2465

Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows…

LOW 23

Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01347 Published 2012-09-17 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal…

Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows…