CVE

Id
36346  
CVE No.
CVE-2008-6229  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content Construction Kit (CCK) 5.x before 5.x-1.10 and 6.x before 6.x-2.0, a module for Drupal, allows remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via (1) field labels and (2) content-type names.  
Phase
Assigned (20090220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
397632 36346 CVE-2008-6229 CONFIRM:http://drupal.org/node/330546  View
397633 36346 CVE-2008-6229 FEDORA:FEDORA-2008-9479  View
397634 36346 CVE-2008-6229 URL:https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00178.html  View
397635 36346 CVE-2008-6229 BID:32136  View
397636 36346 CVE-2008-6229 URL:http://www.securityfocus.com/bid/32136  View
397637 36346 CVE-2008-6229 SECUNIA:32615  View
397638 36346 CVE-2008-6229 URL:http://secunia.com/advisories/32615  View
397639 36346 CVE-2008-6229 VUPEN:ADV-2008-3030  View
397640 36346 CVE-2008-6229 URL:http://www.vupen.com/english/advisories/2008/3030  View
397641 36346 CVE-2008-6229 SECUNIA:32572  View
397642 36346 CVE-2008-6229 URL:http://secunia.com/advisories/32572  View
397643 36346 CVE-2008-6229 XF:cck-fieldlabels-contenttype-xss(46377)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41839 JVNDB-2009-002846 Five Dollar Scripts Drinks スクリプトの index.php における SQL インジェクションの脆弱性 Five Dollar Scripts Drinks スクリプトの index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6233 36346 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002846.html  View