NVD

Id
46680  
Name
CVE-2012-5559  
Description
Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with permissions to submit or edit nodes to inject arbitrary web script or HTML via the page title.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-12-03  
Modified Date
2015-06-19  
Seq
2012-5559  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233818 46680 CVE-2012-5559 http://drupal.org/node/1840992  View
233819 46680 CVE-2012-5559 http://drupal.org/node/1841030  View
233820 46680 CVE-2012-5559 [oss-security] 20121120 Re: CVE Request for Drupal Contributed Modules  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29939 JVNDB-2012-005646 Drupal 用 Chaos tool suite モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Chaos tool suite (ctools) モジュールの Page Manager Node View Task には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5559 58797 CVE-2012-5559 46680 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005646.html 2012-11-14 2012-12-05 View