Lucene search

[email protected]CVE-2008-6972

HistoryAug 13, 2009 - 4:30 p.m.

CVE-2008-6972

2009-08-1316:30:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-6972

drupal

cck

xss

remote authenticated

admin permissions

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with “administer content” permissions to inject arbitrary web script or HTML via the (1) “field label,” (2) “help text,” or (3) “allowed values” settings.

Affected configurations

NVD

Node

drupaldrupal

AND

karen_stevensoncckMatch5.x-1.0-beta

karen_stevensoncckMatch5.x-1.1

karen_stevensoncckMatch5.x-1.2

karen_stevensoncckMatch5.x-1.3

karen_stevensoncckMatch5.x-1.7

karen_stevensoncckMatch5.x-1.x-dev

yves_chedemoiscckMatch5.x-1.4

yves_chedemoiscckMatch5.x-1.5

yves_chedemoiscckMatch5.x-1.6

yves_chedemoiscckMatch5.x-1.6-1

yves_chedemoiscckMatch5.x-1.8

CPENameOperatorVersion
karen_stevenson:cckkaren stevenson cckeq5.x-1.0-beta
karen_stevenson:cckkaren stevenson cckeq5.x-1.1
karen_stevenson:cckkaren stevenson cckeq5.x-1.2
karen_stevenson:cckkaren stevenson cckeq5.x-1.3
karen_stevenson:cckkaren stevenson cckeq5.x-1.7
karen_stevenson:cckkaren stevenson cckeq5.x-1.x-dev
yves_chedemois:cckyves chedemois cckeq5.x-1.4
yves_chedemois:cckyves chedemois cckeq5.x-1.5
yves_chedemois:cckyves chedemois cckeq5.x-1.6
yves_chedemois:cckyves chedemois cckeq5.x-1.6-1

CPE	Name	Operator	Version
karen_stevenson:cck	karen stevenson cck	eq	5.x-1.0-beta
karen_stevenson:cck	karen stevenson cck	eq	5.x-1.1
karen_stevenson:cck	karen stevenson cck	eq	5.x-1.2
karen_stevenson:cck	karen stevenson cck	eq	5.x-1.3
karen_stevenson:cck	karen stevenson cck	eq	5.x-1.7
karen_stevenson:cck	karen stevenson cck	eq	5.x-1.x-dev
yves_chedemois:cck	yves chedemois cck	eq	5.x-1.4
yves_chedemois:cck	yves chedemois cck	eq	5.x-1.5
yves_chedemois:cck	yves chedemois cck	eq	5.x-1.6
yves_chedemois:cck	yves chedemois cck	eq	5.x-1.6-1

Rows per page:

1-10 of 111

References

drupal.org/node/304093

osvdb.org/47929

secunia.com/advisories/31757

www.securityfocus.com/bid/31027

exchange.xforce.ibmcloud.com/vulnerabilities/44915

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

Related for CVE-2008-6972

prion1 nvd1 cvelist1