CVE

Id
41959  
CVE No.
CVE-2009-4524  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a realname (aka real name) element.  
Phase
Assigned (20091231)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
459767 41959 CVE-2009-4524 CONFIRM:http://drupal.org/node/604760  View
459768 41959 CVE-2009-4524 BID:36699  View
459769 41959 CVE-2009-4524 URL:http://www.securityfocus.com/bid/36699  View
459770 41959 CVE-2009-4524 OSVDB:58944  View
459771 41959 CVE-2009-4524 URL:http://osvdb.org/58944  View
459772 41959 CVE-2009-4524 SECUNIA:37058  View
459773 41959 CVE-2009-4524 URL:http://secunia.com/advisories/37058  View
459774 41959 CVE-2009-4524 VUPEN:ADV-2009-2921  View
459775 41959 CVE-2009-4524 URL:http://www.vupen.com/english/advisories/2009/2921  View
459776 41959 CVE-2009-4524 XF:realname-user-profile-xss(53787)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44259 JVNDB-2009-005266 Drupal 用の OG Vocabulary モジュールにおける語彙を作成される脆弱性 Drupal 用の Organic Groups (OG) Vocabulary モジュールには、アクセス制限を回避される、および語彙を作成、変更、または読まれる脆弱性が存在します。 CVE-2009-4528 41959 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005266.html  View