NVD

Id
44433  
Name
CVE-2012-2717  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL field or (2) Desktop URL field to the General configuration page, or the (3) message to the Mobile Tools block message options.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-06-27  
Modified Date
2012-06-28  
Seq
2012-2717  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222948 44433 CVE-2012-2717 http://drupal.org/node/1169008  View
222949 44433 CVE-2012-2717 http://drupal.org/node/1608828  View
222950 44433 CVE-2012-2717 http://drupalcode.org/project/mobile_tools.git/commitdiff/614b0fc  View
222951 44433 CVE-2012-2717 http://www.madirish.net/content/drupal-mobile-tools-6x-23-xss  View
222952 44433 CVE-2012-2717 [oss-security] 20120613 Re: CVE Request for Drupal contributed modules  View
222953 44433 CVE-2012-2717 53734  View
222954 44433 CVE-2012-2717 drupal-mobiletools-unspecified-xss(76002)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27220 JVNDB-2012-002927 Drupal 用の Mobile Tools モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用の Mobile Tools モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2717 55955 CVE-2012-2717 44433 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002927.html 2012-05-30 2012-07-02 View