| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-5585 | 2.1 |
Cross-site scripting (XSS) vulnerability in the Mixpanel module 6.x-1.x before 6.x-1.1 in Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via the Maxpanel token.
|
26-02-2013 - 04:52 | 26-12-2012 - 17:55 | |
| CVE-2012-5590 | 7.5 |
SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
26-02-2013 - 04:52 | 26-12-2012 - 17:55 | |
| CVE-2012-5586 | 2.1 |
The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vectors related to the "user index method" and "the pa
|
26-02-2013 - 04:52 | 26-12-2012 - 17:55 | |
| CVE-2012-5587 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the mailto link.
|
08-01-2013 - 05:00 | 26-12-2012 - 17:55 | |
| CVE-2012-5584 | 4.3 |
The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block.
|
08-01-2013 - 05:00 | 26-12-2012 - 17:55 | |
| CVE-2012-5591 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the path aliases.
|
27-12-2012 - 05:00 | 26-12-2012 - 17:55 | |
| CVE-2012-5589 | 3.5 |
The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary nod
|
27-12-2012 - 05:00 | 26-12-2012 - 17:55 | |
| CVE-2012-5588 | 2.6 |
The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which allows remote attackers to emai
|
27-12-2012 - 05:00 | 26-12-2012 - 17:55 |