CVE

Id
55543  
CVE No.
CVE-2012-2300  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579501 55543 CVE-2012-2300 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579502 55543 CVE-2012-2300 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579503 55543 CVE-2012-2300 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579504 55543 CVE-2012-2300 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579505 55543 CVE-2012-2300 MISC:http://drupal.org/node/1547674  View
579506 55543 CVE-2012-2300 CONFIRM:http://drupal.org/node/1547506  View
579507 55543 CVE-2012-2300 CONFIRM:http://drupal.org/node/1547508  View
579508 55543 CVE-2012-2300 CONFIRM:http://drupalcode.org/project/ubercart.git/commitdiff/3e7c0b8  View
579509 55543 CVE-2012-2300 CONFIRM:http://drupalcode.org/project/ubercart.git/commitdiff/dfd8658  View
579510 55543 CVE-2012-2300 BID:53251  View
579511 55543 CVE-2012-2300 URL:http://www.securityfocus.com/bid/53251  View
579512 55543 CVE-2012-2300 SECUNIA:48935  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27688 JVNDB-2012-003395 Drupal 用の Node Gallery モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用の Node Gallery モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-2305 55543 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003395.html  View