Filtered by vendor Bryce Hamrick Subscriptions
Filtered by product Janrain Capture Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2012-3798 2 Bryce Hamrick, Drupal 2 Janrain Capture, Drupal 2024-11-21 N/A
The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obtain part of the initial input used to generate passwords, which makes it easier to conduct brute force password guessing attacks.
CVE-2012-2727 2 Bryce Hamrick, Drupal 2 Janrain Capture, Drupal 2024-11-21 N/A
Open redirect vulnerability in the Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when synchronizing user data, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.