Drupal cross-site scripting vulnerability via actions feature and trigger module
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy term, related to the actions feature and the trigger module.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2010-3094US | low2.1 | — | ||
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://drupal.org/node/880476WEB
- http://marc.info/?l=oss-security&m=128418560705305&w=2WEB
- http://marc.info/?l=oss-security&m=128440896914512&w=2WEB
- http://www.debian.org/security/2010/dsa-2113WEB
- https://github.com/drupal/drupalPACKAGE
- https://github.com/drupal/drupal/commit/4e8e0454b3bfc3b846cf4b7bcaca0e8f42f0c17aWEB
- https://nvd.nist.gov/vuln/detail/CVE-2010-3094ADVISORY
- https://web.archive.org/web/20120915000000*/http://www.securityfocus.com/bid/42391WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan