Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2012-1648

Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 2.1 Low EPSS 1.1% KEV · Not listed
Vendors
Danielb Drupal
Products
Cool Aid Drupal
CVE-2012-1649

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors.

CVSS 2.0 · 4.9 Medium EPSS 1.2% KEV · Not listed
Vendors
Danielb Drupal
Products
Cool Aid Drupal