Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Sean Robertson Component: Forward Clear all filters
TI-2012-00965 CVE-2012-1057 · GHSA-7mp8-94mg-r4v3

Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking…

Priority LOW 28

Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authent…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00624 Published 2012-02-14 No fix listed CWE-352
TI-2012-00964 CVE-2012-1056 · GHSA-wfp3-hjq5-f86q

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not…

Priority LOW 26

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01464 Published 2012-02-14 No fix listed CWE-264