drupal webform module 5.x-1.4 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x prior to 5.x-1.10, 5.x-2.x prior to 5.x-2.0-beta3, and 6.x prior to 6.x-1.0-beta3 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Drupal Webform Module 5.x-1.0 Drupal Webform Module 5.x-1.9 Drupal Webform Module 6.x-1.x-dev Drupal Webform Module 5.x-1.2 Drupal Webform Module 5.x-1.6 Drupal Webform Module 5.x-1.5 Drupal Webform Module 5.x-1.3 Drupal Webform Module 5.x-1.4 Drupal Webform Module 5.x-1.1 Drupal Webform Module 5.x-2.0 Drupal Webform Module 5.x-1.8 Drupal Webform Module 5.x-1.7

Cross-site scripting (XSS) vulnerability in the Webform module 5.x prior to 5.x-2.8 and 6.x prior to 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label.

The Webform module 5.x prior to 5.x-2.8 and 6.x prior to 6.x-2.8, a module for Drupal, does not prevent caching of a page that contains token placeholders for a default value, which allows remote malicious users to read session variables via unspecified vectors.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook