CVE

Id
55540  
CVE No.
CVE-2012-2297  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote authenticated users with the administer creative commons permission to inject arbitrary web script or HTML via the (1) creativecommons_user_message or (2) creativecommons_site_license_additional_text parameter.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579464 55540 CVE-2012-2297 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579465 55540 CVE-2012-2297 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579466 55540 CVE-2012-2297 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579467 55540 CVE-2012-2297 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579468 55540 CVE-2012-2297 MISC:http://drupal.org/node/1547520  View
579469 55540 CVE-2012-2297 MISC:http://www.madirish.net/content/drupal-creative-commons-6x-10-xss-vulnerability  View
579470 55540 CVE-2012-2297 CONFIRM:http://drupal.org/node/1547478  View
579471 55540 CVE-2012-2297 BID:53248  View
579472 55540 CVE-2012-2297 URL:http://www.securityfocus.com/bid/53248  View
579473 55540 CVE-2012-2297 SECUNIA:48937  View
579474 55540 CVE-2012-2297 URL:http://secunia.com/advisories/48937  View
579475 55540 CVE-2012-2297 XF:creativecommons-licensedescription-xss(75180)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27686 JVNDB-2012-003393 Drupal 用の Site Documentation モジュールにおける重要な情報を取得される脆弱性 Drupal 用の Site Documentation (Sitedoc) モジュールは、アーカイブ時に保存場所を適切にチェックしないため、重要な情報を取得される脆弱性が存在します。 CVE-2012-2302 55540 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003393.html  View