CVE

Id
76800  
CVE No.
CVE-2014-9499  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Godwin"s Law module before 7.x-1.1 for Drupal, when using the dblog module, allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message.  
Phase
Assigned (20150103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705380 76800 CVE-2014-9499 MLIST:[oss-security] 20150103 CVE requests: Drupal contributed modules  View
705381 76800 CVE-2014-9499 URL:http://www.openwall.com/lists/oss-security/2015/01/03/2  View
705382 76800 CVE-2014-9499 MLIST:[oss-security] 20150103 Re: CVE requests: Drupal contributed modules  View
705383 76800 CVE-2014-9499 URL:http://www.openwall.com/lists/oss-security/2015/01/04/6  View
705384 76800 CVE-2014-9499 MISC:https://www.drupal.org/node/2390839  View
705385 76800 CVE-2014-9499 CONFIRM:https://www.drupal.org/node/2390191  View
705386 76800 CVE-2014-9499 XF:drupal-cve20149499-xss(99678)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18638 JVNDB-2014-007513 MediaWiki におけるクロスサイトスクリプティングの脆弱性 MediaWiki には、$wgContentHandlerUseDB が有効になっている場合、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2014-9507 76800 2.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007513.html  View