CVE

Id
81651  
CVE No.
CVE-2015-4374  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name in the recipient (To) address of an email.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
733301 81651 CVE-2015-4374 MLIST:[oss-security] 20150322 CVE requests for Drupal contributed modules  View
733302 81651 CVE-2015-4374 URL:http://www.openwall.com/lists/oss-security/2015/03/22/35  View
733303 81651 CVE-2015-4374 MLIST:[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
733304 81651 CVE-2015-4374 URL:http://www.openwall.com/lists/oss-security/2015/04/25/6  View
733305 81651 CVE-2015-4374 MISC:https://www.drupal.org/node/2454903  View
733306 81651 CVE-2015-4374 CONFIRM:https://www.drupal.org/node/2454055  View
733307 81651 CVE-2015-4374 CONFIRM:https://www.drupal.org/node/2454059  View
733308 81651 CVE-2015-4374 CONFIRM:https://www.drupal.org/node/2454063  View
733309 81651 CVE-2015-4374 BID:73215  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8998 JVNDB-2015-004318 pimcore における SQL インジェクションの脆弱性 pimcore には、SQL インジェクションの脆弱性が存在します。 CVE-2015-4426 81651 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004318.html  View