Project Issue Tracking Module
Approved changes feed: RSS · Atom
cpe:2.3:a:drupal:project_issue_tracking_module:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Drupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de) |
|---|---|
| Product | Project Issue Tracking Module (ba3739cf-a7d3-50a8-b92a-d5880ed10b77) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/br3nda/drupal-module-project_issue |
purl2cpe | 2026-06-01 10:11:36.400560 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-4436 |
vulnerable | 2026-06-08 04:49:56.319595 |
Details available
The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote attackers to (1) obtain sensitive via the Tracker Module and the Recent posts page; (2) obtain project names via unspecified vectors; (3) obtain sensitive information via the statistics pages; and (4) read CVS project activity.
Published: 2007-08-20T22:00:00.000Z
Updated: 2024-08-07T14:53:55.982Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0534 |
vulnerable | 2026-06-08 04:49:32.719716 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 through 5.x before 20070123 and (2) Project 4.6.0 through 5.x before 20070123 modules for Drupal allow remote authenticated users to inject arbitrary web script or HTML via (a) certain "fields on project nodes" or (b) "certain project-specific settings regarding issue tracking."
Published: 2007-01-26T01:00:00.000Z
Updated: 2024-08-07T12:19:30.510Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.