Organic Groups
Approved changes feed: RSS · Atom
cpe:2.3:a:moshe_weitzman:organic_groups:6.x-2.1:*:*:*:*:*:*:*
part: a version: 6.x-2.1 update: *
| Vendor | Moshe Weitzman (c0f0a938-700c-5d03-95fa-4d127c6c6b14) |
|---|---|
| Product | Organic Groups (d647bb93-de5c-52bf-8b98-c87bedaaf17b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/gizra/og |
purl2cpe | 2026-06-01 10:13:28.480443 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3800 |
vulnerable | 2026-06-08 05:02:13.843122 |
Details available
Cross-site scripting (XSS) vulnerability in og.js in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title.
Published: 2012-06-27T00:00:00.000Z
Updated: 2024-08-06T20:21:02.281Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2721 |
vulnerable | 2026-06-08 05:02:05.800158 |
Details available
The default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not properly check permissions when all users have the "access content" permission removed, which allows remote attackers to bypass access restrictions and possibly have other unspecified impact.
Published: 2012-06-27T00:00:00.000Z
Updated: 2024-08-06T19:42:32.441Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2081 |
vulnerable | 2026-06-08 05:00:52.692122 |
Details available
The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module.
Published: 2012-08-14T23:00:00.000Z
Updated: 2024-08-06T19:17:27.906Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.