exploitDog

CVE-2009-3648

Опубликовано: 02 окт. 2009

Источник: redhat

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2009-3648

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=528200drupal-service_links: xss vulnerability

EPSS

Процентиль: 31%

0.00111

Низкий

Связанные уязвимости

CVE-2009-3648

nvd

больше 15 лет назад

Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.

GHSA-jqgm-6w4j-7734

github

около 3 лет назад

Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.

EPSS

Процентиль: 31%

0.00111

Низкий