Vulnerabilities

TI-2012-01415 CVE-2012-1626 · GHSA-8ffj-gcr2-r5wm

SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x…

LOW 29

SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to execute arbitrary SQL com…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01105 Published 2012-09-20 No fix listed CWE-89

TI-2010-02258 CVE-2010-2352 · GHSA-8wgh-rhq6-89pj

The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11…

LOW 28

The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02653 Published 2010-06-21 No fix listed CWE-20

TI-2009-03002 CVE-2009-3157 · GHSA-hjmg-8jw6-qj7r

Cross-site scripting (XSS) vulnerability in the Calendar module 6.x before 6.x-2.2 for…

LOW 19

Cross-site scripting (XSS) vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01011 Published 2009-09-10 No fix listed CWE-79

TI-2009-03001 CVE-2009-3156 · GHSA-9xfg-6whq-qvgm

Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module…

LOW 14

Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or "administer content types" privileges, to…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01261 Published 2009-09-10 No fix listed CWE-79

TI-2008-06660 CVE-2008-6972 · GHSA-jrc3-h3rx-qxh4

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit…

LOW 18

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HT…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00868 Published 2009-08-13 No fix listed CWE-79