1 results (0.014 seconds)

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0

Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors. Semantically-Interconnected Online Communities (SIOC) 5.x antes de 5.x-1.2 y 6.x antes de 6.x-1.1, un módulo de Drupal, no implementa de manera apropiada las APIs menu y database, lo que permite a atacantes remotos obtener nombres de usuarios y leer el resumen digital (hashed) de correos electrónicos y comentarios mediante vectores no especificados. • http://drupal.org/node/318749 http://secunia.com/advisories/32191 http://www.securityfocus.com/bid/31658 https://exchange.xforce.ibmcloud.com/vulnerabilities/45762 • CWE-264: Permissions, Privileges, and Access Controls •