CVE

Id
55312  
CVE No.
CVE-2012-2069  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via the (1) wl_reveal or (2) q parameters.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577765 55312 CVE-2012-2069 MLIST:[oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
577766 55312 CVE-2012-2069 URL:http://www.openwall.com/lists/oss-security/2012/04/07/1  View
577767 55312 CVE-2012-2069 MISC:http://drupal.org/node/1492624  View
577768 55312 CVE-2012-2069 MISC:http://www.madirish.net/content/drupal-wishlist-6x-24-xss-vulnerability  View
577769 55312 CVE-2012-2069 CONFIRM:http://drupal.org/node/1483634  View
577770 55312 CVE-2012-2069 CONFIRM:http://drupal.org/node/1483636  View
577771 55312 CVE-2012-2069 CONFIRM:http://drupalcode.org/project/wishlist.git/commit/6660c33  View
577772 55312 CVE-2012-2069 CONFIRM:http://drupalcode.org/project/wishlist.git/commit/73aaf98  View
577773 55312 CVE-2012-2069 BID:52660  View
577774 55312 CVE-2012-2069 URL:http://www.securityfocus.com/bid/52660  View
577775 55312 CVE-2012-2069 SECUNIA:48486  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27977 JVNDB-2012-003684 Drupal 用 Ubercart Views モジュールにおける重要な情報を取得される脆弱性 Drupal 用 Ubercart Views モジュールの特定のデフォルトビューには、重要な情報を取得される脆弱性が存在します。 CVE-2012-2074 55312 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003684.html  View