CVE

Id
39173  
CVE No.
CVE-2009-1738  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in "aggregator items."  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430817 39173 CVE-2009-1738 CONFIRM:http://drupal.org/node/453098  View
430818 39173 CVE-2009-1738 CONFIRM:http://drupal.org/node/461706  View
430819 39173 CVE-2009-1738 BID:34953  View
430820 39173 CVE-2009-1738 URL:http://www.securityfocus.com/bid/34953  View
430821 39173 CVE-2009-1738 OSVDB:54429  View
430822 39173 CVE-2009-1738 URL:http://www.osvdb.org/54429  View
430823 39173 CVE-2009-1738 SECUNIA:35044  View
430824 39173 CVE-2009-1738 URL:http://secunia.com/advisories/35044  View
430825 39173 CVE-2009-1738 VUPEN:ADV-2009-1319  View
430826 39173 CVE-2009-1738 URL:http://www.vupen.com/english/advisories/2009/1319  View
430827 39173 CVE-2009-1738 XF:feedblock-unspecified-xss(50521)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43669 JVNDB-2009-004676 PC4Arb Pc4 Uploader の code.php における SQL インジェクション攻撃を実行される脆弱性 PC4Arb Pc4 Uploader の code.php には、SQL インジェクション攻撃を実行される脆弱性が存在します。 CVE-2009-1742 39173 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004676.html  View