CVE

Id
60172  
CVE No.
CVE-2013-0225  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-alpha5 for Drupal allows remote authenticated users with the "administer user relationships" permission to inject arbitrary web script or HTML via a relationship name.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607359 60172 CVE-2013-0225 MLIST:[oss-security] 20130124 Re: CVE request for Drupal contributed modules  View
607360 60172 CVE-2013-0225 URL:http://www.openwall.com/lists/oss-security/2013/01/25/4  View
607361 60172 CVE-2013-0225 MISC:https://drupal.org/node/1896720  View
607362 60172 CVE-2013-0225 CONFIRM:http://drupalcode.org/project/user_relationships.git/commitdiff/17e94b9  View
607363 60172 CVE-2013-0225 CONFIRM:http://drupalcode.org/project/user_relationships.git/commitdiff/b9a4739  View
607364 60172 CVE-2013-0225 CONFIRM:https://drupal.org/node/1896272  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19775 JVNDB-2013-001350 MiniUPnP MiniUPnPd の HTTP サービスにおけるスタックベースのバッファオーバーフローの脆弱性 MiniUPnP MiniUPnPd の HTTP サービスにおける SOAPAction ハンドラ内の ExecuteSoapAction 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-0230 60172 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001350.html  View