CVE

Id
65262  
CVE No.
CVE-2013-5315  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Resource Manager in the MEE submodule (mee.module) in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than CVE-2013-4174.  
Phase
Assigned (20130819)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
638301 65262 CVE-2013-5315 FULLDISC:20130724 [Security-news] SA-CONTRIB-2013-060 - Scald - Cross Site Scripting (XSS)  View
638302 65262 CVE-2013-5315 URL:http://seclists.org/fulldisclosure/2013/Jul/224  View
638303 65262 CVE-2013-5315 MISC:https://drupal.org/node/2049415  View
638304 65262 CVE-2013-5315 CONFIRM:http://drupalcode.org/project/scald.git/blobdiff/9ce68f67a25200afa5256f567ef89bc4b9fd705e..974a5e29f502a58e6a955d69a85bb5f16c1c8b3e:/mee/mee.module  View
638305 65262 CVE-2013-5315 CONFIRM:http://drupalcode.org/project/scald.git/commitdiff/32db1ee  View
638306 65262 CVE-2013-5315 CONFIRM:https://drupal.org/node/2049239  View
638307 65262 CVE-2013-5315 BID:61426  View
638308 65262 CVE-2013-5315 URL:http://www.securityfocus.com/bid/61426  View
638309 65262 CVE-2013-5315 OSVDB:95625  View
638310 65262 CVE-2013-5315 URL:http://osvdb.org/95625  View
638311 65262 CVE-2013-5315 SECUNIA:54144  View
638312 65262 CVE-2013-5315 URL:http://secunia.com/advisories/54144  View
638313 65262 CVE-2013-5315 XF:scald-atomtitle-xss(85964)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22233 JVNDB-2013-003808 mojoPortal の Forums/EditPost.aspx におけるクロスサイトスクリプティングの脆弱性 mojoPortal の Forums/EditPost.aspx には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-5320 65262 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003808.html  View