Vulnerabilities > Coleman Watts

DATE CVE VULNERABILITY TITLE RISK
2012-12-03 CVE-2012-5554 Information Exposure vulnerability in Coleman Watts Webform Civicrm 7.X3.0/7.X3.1/7.X3.X
The default configuration for the Webform CiviCRM Integration module 7.x-3.x before 7.x-3.2 has "Enforce Permissions" disabled, which allows remote attackers to obtain contact information by reading webforms.
network
low complexity
coleman-watts drupal CWE-200
5.0