CVE

Id
45308  
CVE No.
CVE-2010-2724  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via unspecified vectors in the hierarchical_select form.  
Phase
Assigned (20100713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
493666 45308 CVE-2010-2724 CONFIRM:http://drupal.org/node/847488  View
493667 45308 CVE-2010-2724 BID:41450  View
493668 45308 CVE-2010-2724 URL:http://www.securityfocus.com/bid/41450  View
493669 45308 CVE-2010-2724 OSVDB:66117  View
493670 45308 CVE-2010-2724 URL:http://osvdb.org/66117  View
493671 45308 CVE-2010-2724 SECUNIA:40440  View
493672 45308 CVE-2010-2724 URL:http://secunia.com/advisories/40440  View
493673 45308 CVE-2010-2724 XF:hierarchicalselect-unspecified-xss(60158)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36315 JVNDB-2010-002095 Microsoft Outlook におけるヒープベースのバッファオーバーフローの脆弱性 Microsoft Outlook は、オンラインモードにて Exchange Server が有効になっている際、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-2728 45308 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002095.html  View