Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1626 State: PUBLISHED Published: 2012-09-20T01:00:00 Last Updated: 2024-08-06T19:01:02.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1401026 - http://secunia.com/advisories/47533 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://osvdb.org/78261 - http://drupal.org/node/1401434 - https://exchange.xforce.ibmcl
ists/oss-security/2012/04/07/1 - http://osvdb.org/78261 - http://drupal.org/node/1401434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72356 - http://www.securityfocus.com/bid/51378
CVE ID: CVE-2012-1627 State: PUBLISHED Published: 2012-09-20T00:00:00Z Last Updated: 2024-09-16T18:49:47.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vud_term.module in the Vote Up/Down module 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via taxonomy terms. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/vote_up_down.git/commit/fe83aa4b8fa44d83a01494870a80d4651434f4c0 - http://drupal.org/node/1401580 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1400530 - http
rupal.org/node/1401580 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1400530 - http://drupal.org/node/1400528 - http://www.securityfocus.com/bid/51376 - http://secunia.com/advisories/47549
CVE ID: CVE-2012-1628 State: PUBLISHED Published: 2012-09-20T01:00:00 Last Updated: 2024-08-06T19:01:02.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SuperCron module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72389 - http://drupal.org/node/1401644
CVE ID: CVE-2012-1629 State: PUBLISHED Published: 2012-09-20T01:00:00 Last Updated: 2024-08-06T19:01:02.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxotouch module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72387 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1401644
CVE ID: CVE-2012-1630 State: PUBLISHED Published: 2012-09-20T01:00:00 Last Updated: 2024-08-06T19:01:02.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Navigator module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72387 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1401644
CVE ID: CVE-2012-1631 State: PUBLISHED Published: 2012-09-20T01:00:00 Last Updated: 2024-08-06T19:01:02.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72386 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1401644 - http://drupal.org/node/140
- http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1401644 - http://drupal.org/node/1407206
CVE ID: CVE-2012-1632 State: PUBLISHED Published: 2012-09-20T00:00:00Z Last Updated: 2024-09-17T01:01:29.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in password_policy.admin.inc in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote authenticated users with administer policies permissions to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/password_policy.git/commit/3c688c3b4a3ed96fdc4b89883595633338c7ebb6 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1401678
ed96fdc4b89883595633338c7ebb6 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1401678 - http://www.securityfocus.com/bid/51385 - http://secunia.com/advisories/47541
CVE ID: CVE-2012-1633 State: PUBLISHED Published: 2012-09-20T00:00:00 Last Updated: 2024-08-06T19:01:02.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote attackers to hijack the authentication of administrative users for requests that unblock a user. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1401678 - http://drupalcode.org/project/password_policy.git/commit/3c688c3b4a3ed96fdc4b89883595633338c7ebb6 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/51385 - ht
3595633338c7ebb6 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/51385 - http://secunia.com/advisories/47541
CVE ID: CVE-2012-1634 State: PUBLISHED Published: 2012-10-06T21:00:00 Last Updated: 2024-08-06T19:01:02.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in video_filter.codecs.inc in the Video Filter module 6.x-2.x and 7.x-2.x for Drupal allows remote attackers to inject arbitrary web script or HTML via the EMBEDLOOKUP parameter for Blip.tv links. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/video_filter.git/commit/49680a6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72359 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://justin.madirish.net/content/drupal-vide
ilities/72359 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://justin.madirish.net/content/drupal-video-filter-6x-28-xss-vulnerability - http://drupal.org/node/1401838 - http://www.securityfocus.com/bid/51381 - http://drupalcode.org/project/video_filter.git/commit/c90c86e
CVE ID: CVE-2012-1635 State: PUBLISHED Published: 2012-08-28T16:00:00Z Last Updated: 2024-09-16T19:01:39.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML sitemap module to obtain sensitive information about unpublished content. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1407456 - https://drupal.org/node/1409268 - http://www.openwall.com/lis
Container: References: - http://drupal.org/node/1407456 - https://drupal.org/node/1409268 - http://www.openwall.com/lists/oss-security/2012/04/07/1
CVE ID: CVE-2012-1636 State: PUBLISHED Published: 2012-10-01T22:00:00Z Last Updated: 2024-09-16T23:47:01.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47650 - http://drupal.org/node/1408556 - http://drupal.org/node/1409422 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/stickynote.git/commit/9a7b535
CVE ID: CVE-2012-1637 State: PUBLISHED Published: 2019-11-21T22:52:44 Last Updated: 2024-08-06T19:01:02.878Z Vendors: Quick Tabs Products: Quicktabs Problem Types: Cross-Site Scripting Description: Cross-site scripting vulnerability (XSS) in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://www.drupal.org/node/1409476
CVE ID: CVE-2012-1638 State: PUBLISHED Published: 2012-09-19T21:00:00Z Last Updated: 2024-09-17T00:26:35.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the "use search_autocomplete" permission to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47731 - http://drupal.org/node/1410674 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/51667 - http://drupal.org/node/1416612 - http://drupalcode.org/project/search
04/07/1 - http://www.securityfocus.com/bid/51667 - http://drupal.org/node/1416612 - http://drupalcode.org/project/search_autocomplete.git/commit/589e8f6
CVE ID: CVE-2012-1639 State: PUBLISHED Published: 2012-10-01T20:00:00 Last Updated: 2024-08-06T19:01:02.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in product/commerce_product.module in the Drupal Commerce module for Drupal before 7.x-1.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) sku or (2) title parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78528 - http://secunia.com/advisories/47730 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1416824 - http://drupalcode.org/project/commerce.git/blobdiff/45bc5
s/oss-security/2012/04/07/1 - http://drupal.org/node/1416824 - http://drupalcode.org/project/commerce.git/blobdiff/45bc53875f1675750afe60e709a34c95e3008366..b74cdcd:/modules/product/commerce_product.module - https://exchange.xforce.ibmcloud.com/vulnerabilities/72743 - http://www.securityfocus.com/bid/51668
CVE ID: CVE-2012-1640 State: PUBLISHED Published: 2012-09-19T21:00:00 Last Updated: 2024-08-06T19:01:02.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Managesite module 6.x-1.x before 6.1-1.1 for Drupal allow remote authenticated users with "administer managesite" permissions to inject arbitrary web script or HTML via the title parameter when (1) adding or (2) updating a category. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1417000 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/47732 - https://exchange.xforce.ibmcloud.com/vulnerabi
m/lists/oss-security/2012/04/07/1 - http://secunia.com/advisories/47732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72742 - http://drupalcode.org/project/managesite.git/blobdiff/7dd99c47d891d482be1430d3c06a5bb0f6c74d85..7051b7e:/managesite.module - http://www.securityfocus.com/bid/51669
CVE ID: CVE-2012-1641 State: PUBLISHED Published: 2012-08-28T16:00:00Z Last Updated: 2024-09-16T17:48:22.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission to execute arbitrary PHP code via admin/build/finder/import. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1432320 - http://www.osvdb.org/79014 - http://drupal.org/node/1432318 - http://www.openwall.com/lists/oss-security/2012/03/19/9 - http://drupalcode.org/project/finder.git/commit/bc0cc
432318 - http://www.openwall.com/lists/oss-security/2012/03/19/9 - http://drupalcode.org/project/finder.git/commit/bc0cc82 - http://www.openwall.com/lists/oss-security/2012/03/16/9 - http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://drupal.org/node/1432970 - http://secunia.com/advisories/47943 - http://secunia.com/advisories/47915
CVE ID: CVE-2012-1642 State: PUBLISHED Published: 2012-08-28T16:00:00Z Last Updated: 2024-09-16T18:44:11.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48022 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/linkchecker.git/commit/fef0ddf - https://drupal.org/node/1441252 - http://www.osvdb.org/79315 - htt
upalcode.org/project/linkchecker.git/commit/fef0ddf - https://drupal.org/node/1441252 - http://www.osvdb.org/79315 - http://drupal.org/node/1440508
CVE ID: CVE-2012-1643 State: PUBLISHED Published: 2012-08-28T16:00:00Z Last Updated: 2024-09-17T03:08:24.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1441448 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1441556 - http://www.osvdb.org/79316 - http://secunia.com/advisories/48019 - http://drupalcode.org/project/fp.git/commitdiff/39e7587
CVE ID: CVE-2012-1644 State: PUBLISHED Published: 2012-08-28T16:00:00 Last Updated: 2024-08-06T19:01:02.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1441086 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/og_vocab.git/commitdiff/cd8de08 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53902 - http://www.osvdb.org/79336 - https
git/commitdiff/cd8de08 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53902 - http://www.osvdb.org/79336 - https://drupal.org/node/1441450 - http://secunia.com/advisories/48020
CVE ID: CVE-2012-1645 State: PUBLISHED Published: 2012-08-28T16:00:00Z Last Updated: 2024-09-17T02:56:29.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1441480 - http://drupalcode.org/project/cdn.git/commitdiff/cd2a5ff - http://drupalcode.org/project/cdn.git/commitdiff/eca85e6 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://dr
drupalcode.org/project/cdn.git/commitdiff/eca85e6 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://drupal.org/node/1441502 - http://www.osvdb.org/79317 - http://secunia.com/advisories/48032 - http://drupal.org/node/1441482
CVE ID: CVE-2012-1646 State: PUBLISHED Published: 2012-09-25T23:00:00 Last Updated: 2024-08-06T19:01:02.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via the (1) title parameter in faq.admin.inc or (2) detailed_question parameter in faq.module. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1451194 - http://drupalcode.org/project/faq.git/commit/912f1d2 - http://osvdb.org/79466 - http://secunia.com/advisories/48131 - http://www.securityfocus.com
ect/faq.git/commit/912f1d2 - http://osvdb.org/79466 - http://secunia.com/advisories/48131 - http://www.securityfocus.com/bid/52126 - http://drupalcode.org/project/faq.git/blobdiff/525fb85e5a43cb6cfe3028aa88eaf8a6e40548d5..f381756:/faq.admin.inc - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/faq.git/commit/f381756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73452 - http://drupalcode.org/project/faq.git/blobdiff/2991dd94e70a2881571a4b777645f4dcc42c1f10..912f1d2:/faq.module
CVE ID: CVE-2012-1647 State: PUBLISHED Published: 2012-08-28T16:00:00 Last Updated: 2024-08-06T19:01:02.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER['HTTP_HOST'] or (2) $_SERVER['SCRIPT_NAME'] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION. Additional Analyst Notes: - CVE Program Conta
r/player/getplaylist.php, and possibly other vectors related to $_SESSION. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1461424 - http://drupalcode.org/project/mediafront.git/commitdiff/b3857aa - http://drupalcode.org/project/mediafront.git/commitdiff/6300750 - https://drupal.org/node/1460892 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://www.securityfocus.com/bid/52229 - https://drupal.org/node/1460894 - http://www.osvdb.org/79684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73606
CVE ID: CVE-2012-1648 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:01:02.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73607 - http://secunia.com/advisories/48196 - http://www.securityfocus.com/bid/52232 - http://drupal.org/node/1461438 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://dr
cus.com/bid/52232 - http://drupal.org/node/1461438 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1417186 - http://osvdb.org/79712
CVE ID: CVE-2012-1649 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T19:01:02.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73608 - http://www.securityfocus.com/bid/52232 - http://drupal.org/node/1461438 - http://www.osvdb.org/79772 - http://www.openwall.com/lists/oss-security/2012/04/07/1
- http://drupal.org/node/1461438 - http://www.osvdb.org/79772 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1417186
CVE ID: CVE-2012-1650 State: PUBLISHED Published: 2012-08-28T16:00:00 Last Updated: 2024-08-06T19:01:02.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/zipcart.git/commitdiff/fe143c2 - https://drupal.org/node/1461446 - https://drupal.org/node/1460892 - http://www.osvdb.org/79766 - http://www.openwall.com/lists/o
drupal.org/node/1461446 - https://drupal.org/node/1460892 - http://www.osvdb.org/79766 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73609 - http://www.securityfocus.com/bid/52231
CVE ID: CVE-2012-1651 State: PUBLISHED Published: 2012-09-19T19:00:00Z Last Updated: 2024-09-16T17:33:22.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1461470 - http://www.osvdb.org/79696 - http://www.securityfocus.com/bid/52226 - http://secunia.com/advisories/48202 - http://drupal.org/node/1132838 - http://www.openwall.com/lists/oss-security/2012/04/07/1
CVE ID: CVE-2012-1652 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T19:01:02.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via unspecified vectors related to "the vocabulary's help text." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1461318 - http://drupal.org/node/1461724 - http://secunia.com/advisories/48235 - http://osvdb.org/79683 - http://www.openwall.com/lists/oss-security/2012/04/07/
- http://secunia.com/advisories/48235 - http://osvdb.org/79683 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupalcode.org/project/hierarchical_select.git/commit/be32dceb17d25553e474c295a8c3db69eab95cee - http://www.securityfocus.com/bid/52228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73611
CVE ID: CVE-2012-1653 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T19:01:02.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Views Integrator (TVI) module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73612 - http://drupal.org/node/1306946 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1461892 - http://secun
g/node/1306946 - http://www.openwall.com/lists/oss-security/2012/04/07/1 - http://drupal.org/node/1461892 - http://secunia.com/advisories/48163 - http://www.securityfocus.com/bid/52227