oss-sec mailing list archives

CVE request for Drupal contributed modules


From: Forest Monsen <forest.monsen () gmail com>
Date: Thu, 26 Sep 2013 14:21:38 -0700

Hi there,

I'd like to request CVE identifiers for:

SA-CONTRIB-2013-073 - Make Meeting Scheduler - Access Bypass
https://drupal.org/node/2081637

SA-CONTRIB-2013-074 - MediaFront - Cross Site Scripting (XSS)
https://drupal.org/node/2087051

SA-CONTRIB-2013-075 - Click2Sell - Multiple Vulnerabilities (XSS and CSRF)
(Now marked "unsupported," and no patch provided)
https://drupal.org/node/2087055

SA-CONTRIB-2013-076 - jQuery Countdown - Cross Site Scripting (XSS)
https://drupal.org/node/2087095

SA-CONTRIB-2013-077 - Google Site Search - Cross Site Scripting (XSS)
https://drupal.org/node/2092395

Thanks!

Best,
Forest

Current thread: