NVD

Id
46799  
Name
CVE-2012-5705  
Description
Cross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks) in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to inject arbitrary web script or HTML via the "block names."  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-01  
Modified Date
2012-11-02  
Seq
2012-5705  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234416 46799 CVE-2012-5705 http://drupal.org/node/1732828  View
234417 46799 CVE-2012-5705 http://drupal.org/node/1732946  View
234418 46799 CVE-2012-5705 http://www.madirish.net/543  View
234419 46799 CVE-2012-5705 [oss-security] 20121004 CVE Request for Drupal Contributed Modules  View
234420 46799 CVE-2012-5705 [oss-security] 20121007 Re: CVE Request for Drupal Contributed Modules  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29489 JVNDB-2012-005196 Drupal 用 Hotblocks モジュールの設定ページにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Hotblocks モジュールの設定ページ (admin/settings/hotblocks) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5705 58943 CVE-2012-5705 46799 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005196.html 2012-08-15 2012-11-02 View