NVD

Id
49341  
Name
CVE-2009-2079  
Description
Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via (1) vocabulary names, (2) synonyms, and (3) term names.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-16  
Modified Date
2009-06-17  
Seq
2009-2079  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249785 49341 CVE-2009-2079 http://drupal.org/node/487602  View
249786 49341 CVE-2009-2079 http://drupal.org/node/487620  View
249787 49341 CVE-2009-2079 http://drupal.org/node/487818  View
249788 49341 CVE-2009-2079 http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability  View
249789 49341 CVE-2009-2079 35286  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42503 JVNDB-2009-003510 Drupal 用の Taxonomy manager モジュールの管理ページインターフェースにおけるクロスサイトスクリプティングの脆弱性 Drupal 用の Taxonomy manager モジュールの管理ページインターフェースには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2079 39510 CVE-2009-2079 49341 3.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003510.html 2009-06-10 2012-06-26 View