CVE-2012-5554

Published: Dec 3, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The default configuration for the Webform CiviCRM Integration module 7.x-3.x before 7.x-3.2 has "Enforce Permissions" disabled, which allows remote attackers to obtain contact information by reading webforms.

Affected (12)

Products: Coleman Watts: Webform Civicrm

Coleman Watts

1 product

Webform Civicrm

Configuration A

12 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Coleman Watts Webform Civicrm	Version 7.x-3.0
Coleman Watts Webform Civicrm	Version 7.x-3.0 beta1
Coleman Watts Webform Civicrm	Version 7.x-3.0 beta2
Coleman Watts Webform Civicrm	Version 7.x-3.0 beta3
Coleman Watts Webform Civicrm	Version 7.x-3.0 beta4
Coleman Watts Webform Civicrm	Version 7.x-3.0 beta5
Coleman Watts Webform Civicrm	Version 7.x-3.0 rc1
Coleman Watts Webform Civicrm	Version 7.x-3.0 rc2
Coleman Watts Webform Civicrm	Version 7.x-3.0 rc3
Coleman Watts Webform Civicrm	Version 7.x-3.0 rc4
Coleman Watts Webform Civicrm	Version 7.x-3.1
Coleman Watts Webform Civicrm	Version 7.x-3.x dev