CVE

Id
55551  
CVE No.
CVE-2012-2308  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579568 55551 CVE-2012-2308 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579569 55551 CVE-2012-2308 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579570 55551 CVE-2012-2308 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579571 55551 CVE-2012-2308 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579572 55551 CVE-2012-2308 MISC:http://drupal.org/node/1557872  View
579573 55551 CVE-2012-2308 BID:53345  View
579574 55551 CVE-2012-2308 URL:http://www.securityfocus.com/bid/53345  View
579575 55551 CVE-2012-2308 XF:drupal-taxonomygrid-unspecified-xss(75345)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27007 JVNDB-2012-002714 Linux Kernel の rio_ioctl 関数における Ethernet アダプタへデータを書き込まれる脆弱性 Linux Kernel の drivers/net/ethernet/dlink/dl2k.c 内の rio_ioctl 関数は、SIOCSMIIREG コマンドへのアクセスを制限しないため、Ethernet アダプタへデータを書き込まれる脆弱性が存在します。 CVE-2012-2313 55551 1.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002714.html  View