Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-2717
HistoryJun 27, 2012 - 9:55 p.m.

CVE-2012-2717

2012-06-2721:55:03
CWE-79
[email protected]
web.nvd.nist.gov
16
cve-2012-2717
cross-site scripting
xss
mobile tools module
drupal
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL field or (2) Desktop URL field to the General configuration page, or the (3) message to the Mobile Tools block message options.

Affected configurations

NVD
Node
mathew_winstonemobile_toolsMatch6.x-2.0
OR
mathew_winstonemobile_toolsMatch6.x-2.1
OR
mathew_winstonemobile_toolsMatch6.x-2.2
OR
mathew_winstonemobile_toolsMatch6.x-2.xdev
AND
drupaldrupalMatch-

Related

prion 1
cvelist 1
nvd 1
drupal 1
prion
prion
Cross site scripting
2012-06-27 21:55:00
cvelist
cvelist
CVE-2012-2717
2012-06-27 21:00:00
nvd
nvd
CVE-2012-2717
2012-06-27 21:55:03
drupal
drupal
SA-CONTRIB-2012-088 - Mobile Tools - Cross Site Scripting (XSS)
2012-05-30 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON
Related for CVE-2012-2717
prion1cvelist1nvd1drupal1