Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Justin Dodge Subscribe
Filtered by product Hotblocks
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-5705 2 Drupal, Justin Dodge 2 Drupal, Hotblocks 2012-11-01 2.1 LOW N/A
Cross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks) in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to inject arbitrary web script or HTML via the "block names."
CVE-2012-5704 2 Drupal, Justin Dodge 2 Drupal, Hotblocks 2012-11-01 3.5 LOW N/A
The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references itself.