Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Nanwich Clear all filters
TI-2009-04315 CVE-2009-4559 · GHSA-35pg-ggpq-j763

Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00833 Published 2010-01-04 No fix listed CWE-79
TI-2009-04273 CVE-2009-4517 · GHSA-93v5-m8h2-php8

Cross-site request forgery (CSRF) vulnerability in the FAQ Ask module 5.x and 6.x before…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that access unpu…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00604 Published 2009-12-31 No fix listed CWE-352