Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Justin Dodge Clear all filters
TI-2012-04802 CVE-2012-5705 · GHSA-65mg-2397-hph9

Cross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks)…

Priority LOW 13

Cross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks) in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permiss…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.00971 Published 2012-11-01 No fix listed CWE-79
TI-2012-04801 CVE-2012-5704 · GHSA-w9pp-6v27-ph4c

The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users…

Priority LOW 19

The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references it…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01114 Published 2012-11-01 No fix listed CWE-399