CVSS: 5.4EPSS: 0%CPEs: 25EXPL: 0CVE-2009-3652
https://notcve.org/view.php?id=CVE-2009-3652
09 Oct 2009 — Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x-1.x before 6.x-1.4, a module for Drupal, allows remote authenticated users, with create or edit group nodes permissions, to inject arbitrary web script or HTML via the User-Agent HTTP header, a different issue than CVE-2008-3095. Una vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo de Drupal "Organic Groups (OG)" en sus versiones v5.x-7.x antes de... • http://drupal.org/node/592358 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 11EXPL: 0CVE-2008-3094
https://notcve.org/view.php?id=CVE-2008-3094
09 Jul 2008 — The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information (private group names) via unspecified vectors. El módulo The Organic Groups (OG) 5.x antes de 5.x-7.3 y 6.x antes de 6.x-1.0-RC1, un módulo para Drupal, permite a atacantes remotos obtener información sensible (nombres de grupo privados) mediante vectores no especificados. • http://drupal.org/node/277873 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •