Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 08/04/2016 Updated: 14/04/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 7.3 | Impact Score: 3.4 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The _prepopulate_request_walk function in the Prepopulate module 7.x-2.x prior to 7.x-2.1 for Drupal allows remote malicious users to modify the (1) actions, (2) container, (3) token, (4) password, (5) password_confirm, (6) text_format, or (7) markup field type, and consequently have unspecified impact, via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
prepopulate project prepopulate 7.x-2.x
prepopulate project prepopulate 7.x-2.0

CWE-264 https://www.drupal.org/node/2679503 https://www.drupal.org/node/2679215 http://cgit.drupalcode.org/prepopulate/commit/prepopulate.module?id=16cdb63cc3b256dd785e029ec17f92ddf80cc443 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-3188

Vulnerability Summary

References

Vulmon Search

About

Products

Connect