NVD

Id
45878  
Name
CVE-2012-4496  
Description
Cross-site scripting (XSS) vulnerability in the Custom Publishing Options module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer nodes" permission to inject arbitrary web script or HTML via the status labels parameter.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-31  
Modified Date
2012-11-02  
Seq
2012-4496  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230351 45878 CVE-2012-4496 http://drupal.org/node/1730766  View
230352 45878 CVE-2012-4496 http://drupal.org/node/1732980  View
230353 45878 CVE-2012-4496 [oss-security] 20121004 CVE Request for Drupal Contributed Modules  View
230354 45878 CVE-2012-4496 [oss-security] 20121007 Re: CVE Request for Drupal Contributed Modules  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29482 JVNDB-2012-005189 Drupal 用 Custom Publishing Options モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Custom Publishing Options モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4496 57734 CVE-2012-4496 45878 2.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005189.html 2012-08-14 2012-11-02 View