RSS   Vulnerabilities for 'Forward'   RSS

2012-02-13
 
CVE-2012-1057

CWE-352
 

 
Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the tracking code, possibly related to improper "flood control."

 
 
CVE-2012-1056

CWE-264
 

 
The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.

 

 >>> Vendor: Sean robertson 2 Products
Crmngp
Forward


Copyright 2024, cxsecurity.com

 

Back to Top