Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Sean Robertson Clear all filters
TI-2012-00965 CVE-2012-1057 · GHSA-7mp8-94mg-r4v3

Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking…

Priority LOW 28

Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authent…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00624 Published 2012-02-14 No fix listed CWE-352
TI-2012-00964 CVE-2012-1056 · GHSA-wfp3-hjq5-f86q

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not…

Priority LOW 26

The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01464 Published 2012-02-14 No fix listed CWE-264
TI-2009-03722 CVE-2009-3920 · GHSA-6vrh-pc25-c9jj

An administration page in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12…

Priority LOW 26

An administration page in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal does not perform the expected access control, which allows remote attackers to read log information via unspecified vec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01464 Published 2009-11-09 No fix listed CWE-264