NVD

Id
30223  
Name
CVE-2014-1607  
Description
** DISPUTED ** Cross-site scripting (XSS) vulnerability in the EventCalendar module for Drupal 7.14 allows remote attackers to inject arbitrary web script or HTML via the year parameter to eventcalander/. NOTE: this issue has been disputed by the Drupal Security Team; it may be site-specific. If so, then this CVE will be REJECTed in the future.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-01-26  
Modified Date
2014-10-18  
Seq
2014-1607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160016 30223 CVE-2014-1607 20140123 [CVE-2014-1607.] Cross Site Scripting(XSS) in Drupal Event calendar module  View
160017 30223 CVE-2014-1607 https://groups.drupal.org/node/402023  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12392 JVNDB-2014-001267 Drupal 用 EventCalendar モジュールにおけるクロスサイトスクリプティングの脆弱性 ** 未確定 ** 本件は、脆弱性として確定していません。 CVE-2014-1607 68894 CVE-2014-1607 30223 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001267.html 2014-01-23 2014-02-18 View