CVE

Id
55311  
CVE No.
CVE-2012-2068  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in fancy_slide.module in the Fancy Slide module before 6.x-2.7 for Drupal allow remote authenticated users with the administer fancy_slide permission to inject arbitrary web script or HTML via the (1) node_title or (2) nodequeue_title parameter.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577753 55311 CVE-2012-2068 MLIST:[oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
577754 55311 CVE-2012-2068 URL:http://www.openwall.com/lists/oss-security/2012/04/07/1  View
577755 55311 CVE-2012-2068 MISC:http://drupal.org/node/1482744  View
577756 55311 CVE-2012-2068 CONFIRM:http://drupal.org/node/1417688  View
577757 55311 CVE-2012-2068 CONFIRM:http://drupalcode.org/project/fancy_slide.git/commit/cd2a424  View
577758 55311 CVE-2012-2068 BID:52513  View
577759 55311 CVE-2012-2068 URL:http://www.securityfocus.com/bid/52513  View
577760 55311 CVE-2012-2068 OSVDB:80069  View
577761 55311 CVE-2012-2068 URL:http://www.osvdb.org/80069  View
577762 55311 CVE-2012-2068 SECUNIA:48412  View
577763 55311 CVE-2012-2068 URL:http://secunia.com/advisories/48412  View
577764 55311 CVE-2012-2068 XF:fancyslide-createslideshowblocks-xss(74070)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27976 JVNDB-2012-003683 Drupal 用の Bundle copy モジュールにおける任意の PHP コードを実行される脆弱性 Drupal 用の Bundle copy モジュールは、設定をインポートする際に、"use PHP for settings" パーミッションをチェックしないため、任意の PHP コードを実行される脆弱性が存在します。 CVE-2012-2073 55311 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003683.html  View