Filtered by vendor Quicksketch Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2010-1958 2 Drupal, Quicksketch 2 Drupal, Filefield 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to File' or 'URL to File' display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).
CVE-2009-3781 1 Quicksketch 1 Filefield 2024-11-21 N/A
The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files via unspecified vectors.