CVE

Id
55309  
CVE No.
CVE-2012-2066  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the FCKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal allows remote authenticated users or remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577731 55309 CVE-2012-2066 MLIST:[oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
577732 55309 CVE-2012-2066 URL:http://www.openwall.com/lists/oss-security/2012/04/07/1  View
577733 55309 CVE-2012-2066 MISC:http://drupal.org/node/1482528  View
577734 55309 CVE-2012-2066 CONFIRM:http://drupal.org/node/1482442  View
577735 55309 CVE-2012-2066 CONFIRM:http://drupal.org/node/1482466  View
577736 55309 CVE-2012-2066 CONFIRM:http://drupal.org/node/1482480  View
577737 55309 CVE-2012-2066 OSVDB:80079  View
577738 55309 CVE-2012-2066 URL:http://www.osvdb.org/80079  View
577739 55309 CVE-2012-2066 SECUNIA:48435  View
577740 55309 CVE-2012-2066 URL:http://secunia.com/advisories/48435  View
577741 55309 CVE-2012-2066 XF:ckeditor-drupal-unspec-xss(74036)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27974 JVNDB-2012-003681 Drupal 用 Contact Forms モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Contact Forms モジュールには、core contact form が有効な際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2071 55309 2.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003681.html  View