Search vulnerabilities

Results 2

Export CSV
CVE-2012-2060

Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Products
CVE-2012-2061

Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Products