CVE-2013-4502
Published May 13, 2014The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file permissions, which allows remote authenticated users to read…
Vendor archive
nathan_haug CVEs
Beta · best-effort7 CVEs tagged to vendor nathan_haug — 0 Critical, 0 High, 4 Medium, 3 Low, 0 Unrated.
CVE-2013-2129
Published Jun 24, 2013Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authenticated users with the "edit own webform content" or "edit al…
CVE-2012-5538
Published Dec 3, 2012Cross-site scripting (XSS) vulnerability in the FileField Sources module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.6 for Drupal, when the field has "Reference existing" sour…
CVE-2012-1660
Published Sep 18, 2012Multiple cross-site scripting (XSS) vulnerabilities in components/select.inc in the Webform module 6.x-3.x before 6.x-3.17 and 7.x-3.x before 7.x-3.17 for Drupal, when the "Select…
CVE-2009-4533
Published Dec 31, 2009The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, does not prevent caching of a page that contains token placeholders for a default value, which a…
CVE-2009-4532
Published Dec 31, 2009Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform crea…
CVE-2009-4207
Published Dec 4, 2009Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.7 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web scri…
Showing 1-7 of 7 CVEsPage 1 of 1