CVE

Id
55315  
CVE No.
CVE-2012-2072  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Share Buttons (AddToAny) module 6.x-3.x before 6.x-3.4 for Drupal allows remote authenticated users with the administer addtoany permission to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577802 55315 CVE-2012-2072 MLIST:[oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
577803 55315 CVE-2012-2072 URL:http://www.openwall.com/lists/oss-security/2012/04/07/1  View
577804 55315 CVE-2012-2072 MISC:http://drupal.org/node/1506412  View
577805 55315 CVE-2012-2072 CONFIRM:http://drupal.org/node/1083664  View
577806 55315 CVE-2012-2072 BID:52777  View
577807 55315 CVE-2012-2072 URL:http://www.securityfocus.com/bid/52777  View
577808 55315 CVE-2012-2072 OSVDB:80675  View
577809 55315 CVE-2012-2072 URL:http://osvdb.org/80675  View
577810 55315 CVE-2012-2072 SECUNIA:48615  View
577811 55315 CVE-2012-2072 URL:http://secunia.com/advisories/48615  View
577812 55315 CVE-2012-2072 XF:sharebuttons-unspecified-xss(74469)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27980 JVNDB-2012-003687 Drupal 用 ShareThis モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 ShareThis モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-2077 55315 5.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003687.html  View