CVE

Id
72466  
CVE No.
CVE-2014-5169  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title.  
Phase
Assigned (20140731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
684510 72466 CVE-2014-5169 MLIST:[oss-security] 20140730 CVE request for Drupal contributed modules  View
684511 72466 CVE-2014-5169 URL:http://www.openwall.com/lists/oss-security/2014/07/31/2  View
684512 72466 CVE-2014-5169 MLIST:[oss-security] 20140731 Re: CVE request for Drupal contributed modules  View
684513 72466 CVE-2014-5169 URL:http://www.openwall.com/lists/oss-security/2014/07/31/4  View
684514 72466 CVE-2014-5169 MISC:https://www.drupal.org/node/2312609  View
684515 72466 CVE-2014-5169 CONFIRM:https://www.drupal.org/node/2311887  View
684516 72466 CVE-2014-5169 BID:68974  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14799 JVNDB-2014-003674 libvirt における任意のファイルを読まれる脆弱性 libvirt には、ファイングレインアクセス制御が有効になっている場合、任意のファイルを読まれる脆弱性が存在します。 CVE-2014-5177 72466 1.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003674.html  View