CVE

Id
55541  
CVE No.
CVE-2012-2298  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579476 55541 CVE-2012-2298 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579477 55541 CVE-2012-2298 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579478 55541 CVE-2012-2298 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579479 55541 CVE-2012-2298 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579480 55541 CVE-2012-2298 MISC:http://drupal.org/node/1547660  View
579481 55541 CVE-2012-2298 CONFIRM:http://drupal.org/node/1547352  View
579482 55541 CVE-2012-2298 CONFIRM:http://drupalcode.org/project/realname.git/commitdiff/41786d0  View
579483 55541 CVE-2012-2298 CONFIRM:http://drupalcode.org/project/realname.git/commitdiff/b920794  View
579484 55541 CVE-2012-2298 BID:53250  View
579485 55541 CVE-2012-2298 URL:http://www.securityfocus.com/bid/53250  View
579486 55541 CVE-2012-2298 SECUNIA:48936  View
579487 55541 CVE-2012-2298 URL:http://secunia.com/advisories/48936  View
579488 55541 CVE-2012-2298 XF:realname-unspecified-xss(75181)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27522 JVNDB-2012-003229 Drupal 用 Spaces モジュールにおける重要な情報を取得される脆弱性 Drupal 用 Spaces モジュールは、非オブジェクトのページではパーミッションを強制しないため、重要な情報を取得される、およびその他の影響を受ける脆弱性が存在します。 CVE-2012-2303 55541 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003229.html  View