NVD

Id
51493  
Name
CVE-2009-4370  
Description
Cross-site scripting (XSS) vulnerability in the Menu module (modules/menu/menu.admin.inc) in Drupal Core 6.x before 6.15 allows remote authenticated users with permissions to create new menus to inject arbitrary web script or HTML via a menu description, which is not properly handled in the menu administration overview.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-21  
Modified Date
2009-12-22  
Seq
2009-4370  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261195 51493 CVE-2009-4370 http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch  View
261196 51493 CVE-2009-4370 http://drupal.org/node/661586  View
261197 51493 CVE-2009-4370 37372  View
261198 51493 CVE-2009-4370 drupal-menu-xss(54872)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41470 JVNDB-2009-002477 Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal の Menu モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4370 41801 CVE-2009-4370 51493 3.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002477.html 2009-12-16 2010-02-02 View