Boombatower / Subuser

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2012-4487	The Subuser module before 6.x-1.8 for Drupal does not properly check "switch subuser" permissions, which allows remote authenticated parent users to change the…	MEDIUM	4.0	Nov 2, 2012
CVE-2012-4486	Cross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication of arbitra…	MEDIUM	6.8	Nov 2, 2012

Rows per page

Showing 1 to 2 of 2 CVEs