Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Semantically_interconnected_online_communities | Drupal | * | 5.x_1.0 (including) |
| Semantically_interconnected_online_communities | Drupal | * | 6.x_1.0 (including) |
References
- http://drupal.org/node/318749
- http://secunia.com/advisories/32191
- http://www.securityfocus.com/bid/31658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45762
- http://drupal.org/node/318749
- http://secunia.com/advisories/32191
- http://www.securityfocus.com/bid/31658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45762