NVD

Id
13449  
Name
CVE-2010-1958  
Description
Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and "Path to File" or "URL to File" display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-06-21  
Modified Date
2010-06-22  
Seq
2010-1958  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74360 13449 CVE-2010-1958 http://drupal.org/node/829808  View
74361 13449 CVE-2010-1958 http://www.madirish.net/?article=461  View
74362 13449 CVE-2010-1958 40923  View
74363 13449 CVE-2010-1958 filefieldmodule-filepath-xss(59500)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39696 JVNDB-2010-005481 Drupal 用の FileField モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用の FileField モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-1958 44538 CVE-2010-1958 13449 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005481.html 2010-06-17 2012-12-20 View