CVE

Id
55319  
CVE No.
CVE-2012-2076  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577848 55319 CVE-2012-2076 MLIST:[oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
577849 55319 CVE-2012-2076 URL:http://www.openwall.com/lists/oss-security/2012/04/07/1  View
577850 55319 CVE-2012-2076 MISC:http://drupal.org/node/1506448  View
577851 55319 CVE-2012-2076 CONFIRM:http://drupal.org/node/1504746  View
577852 55319 CVE-2012-2076 CONFIRM:http://drupalcode.org/project/sharethis.git/commit/11f247a  View
577853 55319 CVE-2012-2076 BID:52778  View
577854 55319 CVE-2012-2076 URL:http://www.securityfocus.com/bid/52778  View
577855 55319 CVE-2012-2076 OSVDB:80670  View
577856 55319 CVE-2012-2076 URL:http://osvdb.org/80670  View
577857 55319 CVE-2012-2076 SECUNIA:48598  View
577858 55319 CVE-2012-2076 URL:http://secunia.com/advisories/48598  View
577859 55319 CVE-2012-2076 XF:drupal-sharethis-administrationforms-xss(74516)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27982 JVNDB-2012-003689 Drupal 用 Organic Groups モジュールにおける重要な情報を取得される脆弱性 Drupal 用 Organic Groups (OG) モジュールは、アクセスを制限しないため、プライベートグループタイトルのような重要な情報を取得される脆弱性が存在します。 CVE-2012-2081 55319 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003689.html  View