Filtered by vendor Sean Robertson Subscriptions
Filtered by product Crmngp Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-3920 2 Drupal, Sean Robertson 2 Drupal, Crmngp 2024-11-21 N/A
An administration page in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal does not perform the expected access control, which allows remote attackers to read log information via unspecified vectors.
CVE-2009-3919 2 Drupal, Sean Robertson 2 Drupal, Crmngp 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified "user-supplied information."