Vulnerabilities

TI-2012-02337 CVE-2012-2704 · GHSA-mjmj-78h5-2728

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict…

LOW 26

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01504 Published 2012-08-31 No fix listed CWE-264

TI-2012-02336 CVE-2012-2703 · GHSA-f5rv-ph9h-95jp

Cross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before…

LOW 17

Cross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for Drupal, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to th…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01852 Published 2012-06-27 No fix listed CWE-79

Vulnerabilities

Filters

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict…

Cross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before…