| Max CVSS | 5.8 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-3391 | 5.0 |
The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page.
|
07-04-2018 - 01:29 | 21-04-2015 - 18:59 | |
| CVE-2015-3393 | 5.8 |
Open redirect vulnerability in the Commerce WeDeal module before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter. <a href="http://cwe.mitre.org/data/definit
|
08-09-2017 - 01:29 | 21-04-2015 - 18:59 | |
| CVE-2015-3389 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Download counts report page in the Public Download Count module (pubdlcnt) 7.x-1.x-dev and earlier for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vec
|
08-09-2017 - 01:29 | 21-04-2015 - 18:59 | |
| CVE-2015-3390 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Facebook Album Fetcher module for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors.
|
08-09-2017 - 01:29 | 21-04-2015 - 18:59 | |
| CVE-2015-3392 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Ajax Timeline module before 7.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a node title.
|
08-09-2017 - 01:29 | 21-04-2015 - 18:59 |