CPE Details
Justin Dodge Hotblocks module for Drupal 6.x-1.6
6.x-1.6
2012-11-01
16h48 +00:00
16h48 +00:00
2012-11-21
16h17 +00:00
16h17 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:justin_dodge:hotblocks:6.x-1.6:*:*:*:*:*:*:*
Informations
Vendor
justin_dodgeProduct
hotblocksVersion
6.x-1.6Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references itself. | 3.5 |
|||
| Cross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks) in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to inject arbitrary web script or HTML via the "block names." | 2.1 |
