CVE

Id
41214  
CVE No.
CVE-2009-3779  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the theme_vcard function to a theme and the use of default content.  
Phase
Assigned (20091026)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
452133 41214 CVE-2009-3779 CONFIRM:http://drupal.org/node/610416  View
452134 41214 CVE-2009-3779 CONFIRM:http://drupal.org/node/610420  View
452135 41214 CVE-2009-3779 CONFIRM:http://drupal.org/node/610996  View
452136 41214 CVE-2009-3779 BID:36789  View
452137 41214 CVE-2009-3779 URL:http://www.securityfocus.com/bid/36789  View
452138 41214 CVE-2009-3779 SECUNIA:37127  View
452139 41214 CVE-2009-3779 URL:http://secunia.com/advisories/37127  View
452140 41214 CVE-2009-3779 VUPEN:ADV-2009-3002  View
452141 41214 CVE-2009-3779 URL:http://www.vupen.com/english/advisories/2009/3002  View
452142 41214 CVE-2009-3779 XF:vcard-themevcard-xss(53903)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45429 JVNDB-2009-006436 Drupal 用モジュールの Simplenews Statistics におけるクロスサイトスクリプティングの脆弱性 Drupal 用モジュールの Simplenews Statistics には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-3783 41214 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006436.html  View