Vulnerabilities

TI-2011-01449 CVE-2011-1664 · GHSA-vh49-4q7j-v7vc

Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00615 Published 2011-04-10 No fix listed CWE-352

TI-2011-01448 CVE-2011-1663 · GHSA-xw8q-7hw6-59rg

SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for…

LOW 35

SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01084 Published 2011-04-10 No fix listed CWE-89

TI-2011-01447 CVE-2011-1662 · GHSA-jmmf-pffx-66x4

Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before…

LOW 22

Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01053 Published 2011-04-10 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x…

SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for…

Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before…