NVD

Id
14514  
Name
CVE-2010-3094  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy term, related to the actions feature and the trigger module.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-09-21  
Modified Date
2010-09-22  
Seq
2010-3094  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80431 14514 CVE-2010-3094 http://drupal.org/node/880476  View
80432 14514 CVE-2010-3094 [oss-security] 20100911 CVE id requests: drupal  View
80433 14514 CVE-2010-3094 [oss-security] 20100913 Re: CVE id requests: drupal  View
80434 14514 CVE-2010-3094 DSA-2113  View
80435 14514 CVE-2010-3094 42391  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36329 JVNDB-2010-002109 Drupal におけるクロスサイトスクリプティングの脆弱性 Drupal には、trigger モジュールと組み合わせた actions 機能に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-3094 45674 CVE-2010-3094 14514 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002109.html 2010-08-11 2010-10-07 View