| Max CVSS | 4.9 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-1648 | 2.1 |
Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors.
|
29-08-2017 - 01:31 | 09-09-2012 - 21:55 | |
| CVE-2012-1649 | 4.9 |
Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors.
|
29-08-2017 - 01:31 | 09-09-2012 - 21:55 |