CVE

Id
81658  
CVE No.
CVE-2015-4381  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitrary web script or HTML via unspecified vectors involving nodes of the "Invoice" content type.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
733339 81658 CVE-2015-4381 MLIST:[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
733340 81658 CVE-2015-4381 URL:http://www.openwall.com/lists/oss-security/2015/04/25/6  View
733341 81658 CVE-2015-4381 MISC:https://www.drupal.org/node/2459337  View
733342 81658 CVE-2015-4381 CONFIRM:https://www.drupal.org/node/2474135  View
733343 81658 CVE-2015-4381 CONFIRM:https://www.drupal.org/node/2474139  View
733344 81658 CVE-2015-4381 BID:74345  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8205 JVNDB-2015-003525 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 Adobe Flash Player および Adobe AIR には、任意のコードを実行される脆弱性が存在します。 CVE-2015-4433 81658 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003525.html  View