Vulnerabilities (CVE)

Filtered by vendor Drupal Subscribe
Filtered by product Help Tip Module
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-6531 1 Drupal 1 Help Tip Module 2024-11-21 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote attackers to inject arbitrary web script or HTML, and possibly obtain administrative access, via node titles.
CVE-2006-6530 1 Drupal 1 Help Tip Module 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.