Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:localization_client:6.x-1.0:*:*:*:*:*:*:*

part: a version: 6.x-1.0 update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductLocalization Client (5f56c718-20f3-5f4c-8400-7b3bf5d0ee32)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1344 vulnerable 2026-06-08 04:51:22.158439 Details available
Cross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the translation functionality.
Published: 2009-04-20T14:06:00.000Z
Updated: 2024-09-17T03:08:29.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6169 vulnerable 2026-06-08 04:50:54.384405 Details available
Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."
Published: 2009-02-19T15:02:00.000Z
Updated: 2024-08-07T11:20:25.269Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.