Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-4469

Опубликовано: 30 нояб. 2012
Источник: nvd
CVSS2: 2.6
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.2 for Drupal, when "Log failed hashcash" is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid token, which is not properly handled when administrators use the Database logging module.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:simon_rycroft:hashcash:6.x-2.0:*:*:*:*:*:*:*
cpe:2.3:a:simon_rycroft:hashcash:6.x-2.1:*:*:*:*:*:*:*
cpe:2.3:a:simon_rycroft:hashcash:6.x-2.2:*:*:*:*:*:*:*
cpe:2.3:a:simon_rycroft:hashcash:6.x-2.3:*:*:*:*:*:*:*
cpe:2.3:a:simon_rycroft:hashcash:6.x-2.4:*:*:*:*:*:*:*
cpe:2.3:a:simon_rycroft:hashcash:6.x-2.5:*:*:*:*:*:*:*
cpe:2.3:a:simon_rycroft:hashcash:7.x-2.0:*:*:*:*:*:*:*
cpe:2.3:a:simon_rycroft:hashcash:7.x-2.1:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

EPSS

Процентиль: 52%
0.00285
Низкий

2.6 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
около 3 лет назад

Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.2 for Drupal, when "Log failed hashcash" is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid token, which is not properly handled when administrators use the Database logging module.

EPSS

Процентиль: 52%
0.00285
Низкий

2.6 Low

CVSS2

Дефекты

CWE-79