CVE

Id
55553  
CVE No.
CVE-2012-2310  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579580 55553 CVE-2012-2310 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579581 55553 CVE-2012-2310 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579582 55553 CVE-2012-2310 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579583 55553 CVE-2012-2310 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579584 55553 CVE-2012-2310 MISC:http://drupal.org/node/1558248  View
579585 55553 CVE-2012-2310 CONFIRM:http://drupal.org/node/1508098  View
579586 55553 CVE-2012-2310 CONFIRM:http://drupal.org/node/1508100  View
579587 55553 CVE-2012-2310 SECUNIA:49018  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28559 JVNDB-2012-004266 OpenKM における任意のユーザに管理者権限を割り当てられる脆弱性 OpenKM の admin/Auth は、ユーザの役割を変更可能な権限を適切に適用しないため、任意のユーザに管理者権限を割り当てられる脆弱性が存在します。 CVE-2012-2315 55553 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004266.html  View