NVD

Id
35709  
Name
CVE-2014-8765  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Project Issue File Review module (PIFR) module 6.x-2.x before 6.x-2.17 for Drupal allow (1) remote attackers to inject arbitrary web script or HTML via a crafted patch, which triggers a PIFR client to test the patch and return the results to the PIFR_Server test results page or (2) remote authenticated users with the "manage PIFR environments" permission to inject arbitrary web script or HTML via vectors involving a PIFR_Server administrative page.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-14  
Modified Date
2014-10-22  
Seq
2014-8765  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182914 35709 CVE-2014-8765 65830  View
182915 35709 CVE-2014-8765 https://www.drupal.org/node/2205755  View
182916 35709 CVE-2014-8765 https://www.drupal.org/node/2205767  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16077 JVNDB-2014-004952 Drupal 用 Project Issue File Review モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Project Issue File Review (PIFR) モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-8765 76058 CVE-2014-8765 35709 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004952.html 2014-02-26 2014-10-24 View