CVE-2010-2125

Опубликовано: 01 июн. 2010

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the (1) srs, (2) title, or (3) alt image attribute.

Ссылки

http://drupal.org/node/803930
Patch
Vendor Advisory
http://secunia.com/advisories/39883
Vendor Advisory
http://www.osvdb.org/64770
https://exchange.xforce.ibmcloud.com/vulnerabilities/58719
http://drupal.org/node/803930
Patch
Vendor Advisory
http://secunia.com/advisories/39883
Vendor Advisory
http://www.osvdb.org/64770
https://exchange.xforce.ibmcloud.com/vulnerabilities/58719

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:systemseed:rotor:5.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:5.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:5.x-1.2:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:5.x-1.3:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:5.x-1.4:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:5.x-1.5:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:5.x-1.6:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:5.x-1.7:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:5.x-1.x:dev:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:systemseed:rotor:6.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-1.2:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-1.3:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-1.4:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-1.x:dev:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.0:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.0:beta1:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.0:beta2:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.0:beta3:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.1:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.2:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.3:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.4:*:*:*:*:*:*:*

cpe:2.3:a:systemseed:rotor:6.x-2.x:dev:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00228

Низкий

2.1 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-9jq8-pf78-365m

github

около 3 лет назад