Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4366 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72957 - https://www.drupal.org/node/2445977 - http://www.openwall.com/lists/oss-security/2015/04/25/6
CVE ID: CVE-2015-4367 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Simple Subscription module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer blocks" permission to inject arbitrary web script or HTML via vectors related to block content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72951 - https://www.drupal.org/node/2437931 - https://www.drupal.org/node/2446019 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.d
/2437931 - https://www.drupal.org/node/2446019 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2437933
CVE ID: CVE-2015-4368 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Commerce Ogone module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to complete the checkout for an order without paying via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/72948 - https://www.drupal.org/node/2446051 - https://www.drupal.org/node/2445835
CVE ID: CVE-2015-4369 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Trick Question module before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Trick Question" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2446065 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/72946 - https://www.drupal.org/node/2373147 - https://www.drupal.org/
ty/2015/04/25/6 - http://www.securityfocus.com/bid/72946 - https://www.drupal.org/node/2373147 - https://www.drupal.org/node/2373143
CVE ID: CVE-2015-4370 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Site Documentation module before 6.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2450321 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/73051 - https://www.drupal.org/node/2450387
CVE ID: CVE-2015-4371 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Perfecto module before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2450391 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2449877 - http://www.securityfocus.com/bid/73050
CVE ID: CVE-2015-4372 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Image Title module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2450015 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/73052 - https://www.drupal.org/node/2450393
CVE ID: CVE-2015-4373 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the OG tabs module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to nodes posted in an Organic Groups group. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2404115 - https://www.drupal.org/node/2450427 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/73054
CVE ID: CVE-2015-4374 State: PUBLISHED Published: 2015-06-16T17:00:00 Last Updated: 2024-08-06T06:11:12.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name in the recipient (To) address of an email. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2454055 - https://www.drupal.org/node/2454059 - https://www.drupal.org/node/2454063 - http://www.openwall.com/lists/oss-security/2015/
s://www.drupal.org/node/2454059 - https://www.drupal.org/node/2454063 - http://www.openwall.com/lists/oss-security/2015/03/22/35 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/73215 - https://www.drupal.org/node/2454903
CVE ID: CVE-2015-4375 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities without an access query tag or (2) leveraging knowledge of the ID of an entity. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/03/22/35 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2454909 - https://www.drupal.org/node/2454883
CVE ID: CVE-2015-4376 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Profile2 Privacy Levels" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/03/22/35 - https://www.drupal.org/node/2455011 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2454383 - http://www.se
/2455011 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2454383 - http://www.securityfocus.com/bid/73223
CVE ID: CVE-2015-4377 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2458683 - https://www.drupal.org/node/2459311
CVE ID: CVE-2015-4378 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Crumbs module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with the "Administer Crumbs" permission to inject arbitrary web script or HTML via a custom breadcrumb separator. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2458675 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2459315
CVE ID: CVE-2015-4379 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of certain users for requests that delete files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74343 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2459035 - https://www.drupal.org/node/2459031 - https://www.dr
s/oss-security/2015/04/25/6 - https://www.drupal.org/node/2459035 - https://www.drupal.org/node/2459031 - https://www.drupal.org/node/2459323
CVE ID: CVE-2015-4380 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Linear Case module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2459197 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/74340 - https://www.drupal.org/node/2459327
CVE ID: CVE-2015-4381 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitrary web script or HTML via unspecified vectors involving nodes of the "Invoice" content type. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2459337 - https://www.drupal.org/node/2474135 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.
37 - https://www.drupal.org/node/2474135 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2474139 - http://www.securityfocus.com/bid/74345
CVE ID: CVE-2015-4382 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that (1) create, (2) delete, or (3) alter invoices via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2459337 - https://www.drupal.org/node/2474135 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/247
/www.drupal.org/node/2474135 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2474139 - http://www.securityfocus.com/bid/74345
CVE ID: CVE-2015-4383 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that remove individual voters via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2459349 - http://www.securityfocus.com/bid/74344
CVE ID: CVE-2015-4384 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ubercart Webform Checkout Pane module 6.x-3.x before 6.x-3.10 and 7.x-3.x before 7.x-3.11 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74341 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2459359 - https://www.drupal.org/node/2465857 - https://www.drupal.o
security/2015/04/25/6 - https://www.drupal.org/node/2459359 - https://www.drupal.org/node/2465857 - https://www.drupal.org/node/2466529
CVE ID: CVE-2015-4385 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Imagefield Info module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "Administer image styles" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74349 - https://www.drupal.org/node/2463823 - https://www.drupal.org/node/2463237 - http://www.openwall.com/lists/oss-security/2015/04/25/6
CVE ID: CVE-2015-4386 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:13.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in unspecified administration pages in the EntityBulkDelete module 7.x-1.0 for Drupal allow remote attackers to inject arbitrary web script or HTML via unknown vectors involving creating or editing (1) comments, (2) taxonomy terms, or (3) nodes. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2463049 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/74347 - https://www.drupal.org/node/2463
openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/74347 - https://www.drupal.org/node/2463831
CVE ID: CVE-2015-4387 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Password Policy module 6.x-1.x before 6.x-1.11 and 7.x-1.x before 7.x-1.11 for Drupal, when a site has a policy that uses the username constraint, allows remote attackers to inject arbitrary web script or HTML via a crafted username that is imported from an external source. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74348 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://w
ferences: - http://www.securityfocus.com/bid/74348 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2463329 - https://www.drupal.org/node/2463327 - https://www.drupal.org/node/2463835
CVE ID: CVE-2015-4388 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Current Search Links module 7.x-1.x before 7.x-1.1 for Drupal, when the "Append the keywords passed by the user to the list" option is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted search query. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2463843 - https://www.drupal.org/node/2463493 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/74357
CVE ID: CVE-2015-4389 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Open Graph Importer (og_tag_importer) 7.x-1.x for Drupal does not properly check the create permission for content types created during import, which allows remote authenticated users to bypass intended restrictions by leveraging the "import og_tag_importer" permission. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74354 - https://www.drupal.org/node/2463891 - http://www.openwall.com/lists/oss-security/2015/04/25/6
CVE ID: CVE-2015-4390 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the User Import module 6.x-4.x before 6.x-4.4 and 7.x-2.x before 7.x-2.3 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) continue or (2) delete an ongoing import via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74352 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2463943 - https://www.drupal.org/nod
tp://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2463943 - https://www.drupal.org/node/2463941 - https://www.drupal.org/node/2463949
CVE ID: CVE-2015-4391 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the CiviCRM private report module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of users for requests that delete reports via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74351 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2467631 - https://www.drupal.org/node/2467697 - https://www.drupal.org/nod
ty/2015/04/25/6 - https://www.drupal.org/node/2467631 - https://www.drupal.org/node/2467697 - https://www.drupal.org/node/2467635
CVE ID: CVE-2015-4392 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-2.7 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to field display settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2471721 - https://www.drupal.org/node/2471733 - http://www.securityfocus.com/bid/74362
CVE ID: CVE-2015-4393 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resource/endpoint for uploading files in the Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote authenticated users with the "Save file information" permission to execute arbitrary code via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2471879 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/74365 - https://www.drupal.org/node/2471847
CVE ID: CVE-2015-4394 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote attackers to bypass the field_access restriction and obtain sensitive private field information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2471879 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/74365 - https://www.drupal.org/node/2471847
CVE ID: CVE-2015-4395 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HybridAuth Social Login module 7.x-2.x before 7.x-2.10 for Drupal stores passwords in plaintext when the "Ask user for a password when registering" option is enabled, which allows remote authenticated users with certain permissions to obtain sensitive information by leveraging access to the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2475943 - http://www.securityfocus.com/bid/74364 - https://www.drupal.org/n
y/2015/04/25/6 - https://www.drupal.org/node/2475943 - http://www.securityfocus.com/bid/74364 - https://www.drupal.org/node/2475443
CVE ID: CVE-2015-4396 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of users with the "kwresearch admin site keywords" permission for requests that (1) create, (2) delete, or (3) set priorities to keywords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2475953 - http://www.securityfocus.com/bid
ww.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2475953 - http://www.securityfocus.com/bid/74361 - https://www.drupal.org/node/2475591
CVE ID: CVE-2015-4397 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the "access node template" permission for requests that delete node templates via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2475955
CVE ID: CVE-2015-4398 State: PUBLISHED Published: 2015-06-16T17:00:00 Last Updated: 2024-08-06T06:11:12.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors involving processing confirmation delete pages. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2454885 - http://www.securityfocus.com/bid/73224 - http://www.openwall.com/lists/oss-security/2015/03/22/35 - http://www.openwall.com/lists/oss-securit
cus.com/bid/73224 - http://www.openwall.com/lists/oss-security/2015/03/22/35 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2454909 - https://www.drupal.org/node/2454883