CVE

Id
55313  
CVE No.
CVE-2012-2070  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the MultiBlock module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer blocks permission to inject arbitrary web script or HTML via the block title.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577776 55313 CVE-2012-2070 MLIST:[oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
577777 55313 CVE-2012-2070 URL:http://www.openwall.com/lists/oss-security/2012/04/07/1  View
577778 55313 CVE-2012-2070 MISC:http://drupal.org/node/1506390  View
577779 55313 CVE-2012-2070 MISC:http://www.madirish.net/content/drupal-multiblock-6x-13-xss-vulnerability  View
577780 55313 CVE-2012-2070 CONFIRM:http://drupal.org/node/1505410  View
577781 55313 CVE-2012-2070 CONFIRM:http://drupal.org/node/1505414  View
577782 55313 CVE-2012-2070 CONFIRM:http://drupalcode.org/project/multiblock.git/commit/2c5177b  View
577783 55313 CVE-2012-2070 CONFIRM:http://drupalcode.org/project/multiblock.git/commit/aee07d3  View
577784 55313 CVE-2012-2070 BID:52800  View
577785 55313 CVE-2012-2070 URL:http://www.securityfocus.com/bid/52800  View
577786 55313 CVE-2012-2070 OSVDB:80673  View
577787 55313 CVE-2012-2070 URL:http://osvdb.org/80673  View
577788 55313 CVE-2012-2070 SECUNIA:48588  View
577789 55313 CVE-2012-2070 URL:http://secunia.com/advisories/48588  View
577790 55313 CVE-2012-2070 XF:multiblock-blocktitle-xss(74466)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27978 JVNDB-2012-003685 Drupal 用 Contact Save モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Contact Save モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2075 55313 2.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003685.html  View