Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete registration code…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00643 Published 2015-06-15 No fix listed CWE-352
Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x-2.8, and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to hijack the authentication of admin…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00711 Published 2015-06-15 No fix listed CWE-352
Priority LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x-2.8, and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with permission to creat…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01046 Published 2015-06-15 No fix listed CWE-79