oss-security - CVE request for Drupal contributed modules

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CABbbngBJqDeCmDtzpz=HG6_0Rb=e5bm9NrpseOFAu3GNmwGF3w@mail.gmail.com>
Date: Thu, 26 Sep 2013 14:21:38 -0700
From: Forest Monsen <forest.monsen@...il.com>
To: oss-security@...ts.openwall.com
Cc: Kurt Seifried <kseifried@...hat.com>
Subject: CVE request for Drupal contributed modules

Hi there,

I'd like to request CVE identifiers for:

SA-CONTRIB-2013-073 - Make Meeting Scheduler - Access Bypass
https://drupal.org/node/2081637

SA-CONTRIB-2013-074 - MediaFront - Cross Site Scripting (XSS)
https://drupal.org/node/2087051

SA-CONTRIB-2013-075 - Click2Sell - Multiple Vulnerabilities (XSS and CSRF)
(Now marked "unsupported," and no patch provided)
https://drupal.org/node/2087055

SA-CONTRIB-2013-076 - jQuery Countdown - Cross Site Scripting (XSS)
https://drupal.org/node/2087095

SA-CONTRIB-2013-077 - Google Site Search - Cross Site Scripting (XSS)
https://drupal.org/node/2092395

Thanks!

Best,
Forest

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.