NVD

Id
39904  
Name
CVE-2013-4274  
Description
Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in password_policy.admin.inc in the Password Policy module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer policies" permission to inject arbitrary web script or HTML via the "Password Expiration Warning" field to the admin/config/people/password_policy/add page.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-08-28  
Modified Date
2013-08-29  
Seq
2013-4274  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202956 39904 CVE-2013-4274 http://www.madirish.net/557  View
202957 39904 CVE-2013-4274 [oss-security] 20130822 Re: CVE request for Drupal contributed modules  View
202958 39904 CVE-2013-4274 61780  View
202959 39904 CVE-2013-4274 https://drupal.org/node/2065241  View
202960 39904 CVE-2013-4274 https://drupal.org/node/2065387  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22355 JVNDB-2013-003930 Drupal 用 Password Policy モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Password Policy モジュールの password_policy.admin.inc 内の password_policy_admin_view 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-4274 64216 CVE-2013-4274 39904 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003930.html 2013-08-14 2013-08-30 View