Nathan Haug

7 CVEs across 2 Nathan Haug products. Browse Nathan Haug vulnerabilities, severities, and proof-of-concept exploits.

Nathan Haug products with known CVEs

ProductCVEs
Webform5
Filefield Sources2
Nathan Haug CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2013-45022014-05-13The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file permissions, which allows remote authent…
CVE-2013-21292013-06-24Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authenticated users with the "edit own webform…
CVE-2012-55382012-12-03Cross-site scripting (XSS) vulnerability in the FileField Sources module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.6 for Drupal, when the field has "Refe…
CVE-2012-16602012-09-18Multiple cross-site scripting (XSS) vulnerabilities in components/select.inc in the Webform module 6.x-3.x before 6.x-3.17 and 7.x-3.x before 7.x-3.17 for Drup…
CVE-2009-45332009-12-31The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, does not prevent caching of a page that contains token placeholders for a de…
CVE-2009-45322009-12-31Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated user…
CVE-2009-42072009-12-04Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.7 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to injec…