NVD

Id
36666  
Name
CVE-2013-0319  
Description
Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the Yandex.Metrica service data.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-03-27  
Modified Date
2013-04-04  
Seq
2013-0319  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187377 36666 CVE-2013-0319 http://drupal.org/node/1921340  View
187378 36666 CVE-2013-0319 http://drupal.org/node/1921342  View
187379 36666 CVE-2013-0319 http://drupal.org/node/1922400  View
187380 36666 CVE-2013-0319 http://drupalcode.org/project/yandex_metrics.git/commitdiff/290b718  View
187381 36666 CVE-2013-0319 http://drupalcode.org/project/yandex_metrics.git/commitdiff/80bb901  View
187382 36666 CVE-2013-0319 [oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20478 JVNDB-2013-002053 Drupal 用 Yandex.Metrics モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Yandex.Metrics モジュールには、Yandex.Metrica サービスデータに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-0319 60261 CVE-2013-0319 36666 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002053.html 2013-02-19 2013-04-01 View