CVE

Id
44542  
CVE No.
CVE-2010-1958  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and "Path to File" or "URL to File" display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).  
Phase
Assigned (20100519)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
485745 44542 CVE-2010-1958 MISC:http://www.madirish.net/?article=461  View
485746 44542 CVE-2010-1958 CONFIRM:http://drupal.org/node/829808  View
485747 44542 CVE-2010-1958 BID:40923  View
485748 44542 CVE-2010-1958 URL:http://www.securityfocus.com/bid/40923  View
485749 44542 CVE-2010-1958 OSVDB:65611  View
485750 44542 CVE-2010-1958 URL:http://osvdb.org/65611  View
485751 44542 CVE-2010-1958 SECUNIA:40186  View
485752 44542 CVE-2010-1958 URL:http://secunia.com/advisories/40186  View
485753 44542 CVE-2010-1958 XF:filefieldmodule-filepath-xss(59500)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39002 JVNDB-2010-004787 HP StorageWorks Storage Mirroring における任意のコードを実行される脆弱性 HP StorageWorks Storage Mirroring には、任意のコードを実行される脆弱性が存在します。 CVE-2010-1962 44542 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004787.html  View