CVE

Id
55318  
CVE No.
CVE-2012-2075  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Contact Save module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the access site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577836 55318 CVE-2012-2075 MLIST:[oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
577837 55318 CVE-2012-2075 URL:http://www.openwall.com/lists/oss-security/2012/04/07/1  View
577838 55318 CVE-2012-2075 MISC:http://drupal.org/node/1506438  View
577839 55318 CVE-2012-2075 CONFIRM:http://drupal.org/node/953788  View
577840 55318 CVE-2012-2075 CONFIRM:http://drupalcode.org/project/contact_save.git/commit/0654894  View
577841 55318 CVE-2012-2075 BID:52787  View
577842 55318 CVE-2012-2075 URL:http://www.securityfocus.com/bid/52787  View
577843 55318 CVE-2012-2075 OSVDB:80669  View
577844 55318 CVE-2012-2075 URL:http://osvdb.org/80669  View
577845 55318 CVE-2012-2075 SECUNIA:48619  View
577846 55318 CVE-2012-2075 URL:http://secunia.com/advisories/48619  View
577847 55318 CVE-2012-2075 XF:drupal-contactsave-unspecified-xss(74515)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27981 JVNDB-2012-003688 Drupal 用 Node Limit Number モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 Node Limit Number モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-2080 55318 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003688.html  View