CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
70.5%
Cross-site scripting (XSS) vulnerability in the Printer, email and PDF versions module 6.x-1.x before 6.x-1.15 and 7.x-1.x before 7.x-1.0 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably the PATH_INFO.
Vendor | Product | Version | CPE |
---|---|---|---|
joao_ventura | 6.x-1.0 | cpe:2.3:a:joao_ventura:print:6.x-1.0:*:*:*:*:*:*:* | |
joao_ventura | 6.x-1.0 | cpe:2.3:a:joao_ventura:print:6.x-1.0:rc1:*:*:*:*:*:* | |
joao_ventura | 6.x-1.0 | cpe:2.3:a:joao_ventura:print:6.x-1.0:rc2:*:*:*:*:*:* | |
joao_ventura | 6.x-1.0 | cpe:2.3:a:joao_ventura:print:6.x-1.0:rc3:*:*:*:*:*:* | |
joao_ventura | 6.x-1.0 | cpe:2.3:a:joao_ventura:print:6.x-1.0:rc4:*:*:*:*:*:* | |
joao_ventura | 6.x-1.0 | cpe:2.3:a:joao_ventura:print:6.x-1.0:rc5:*:*:*:*:*:* | |
joao_ventura | 6.x-1.0 | cpe:2.3:a:joao_ventura:print:6.x-1.0:rc8:*:*:*:*:*:* | |
joao_ventura | 6.x-1.0 | cpe:2.3:a:joao_ventura:print:6.x-1.0:rc9:*:*:*:*:*:* | |
joao_ventura | 6.x-1.1 | cpe:2.3:a:joao_ventura:print:6.x-1.1:*:*:*:*:*:*:* | |
joao_ventura | 6.x-1.2 | cpe:2.3:a:joao_ventura:print:6.x-1.2:*:*:*:*:*:*:* |
drupal.org/node/1515060
drupal.org/node/1515076
drupal.org/node/1515722
drupalcode.org/project/print.git/commit/30480e0
drupalcode.org/project/print.git/commit/6771c3f
secunia.com/advisories/48625
www.openwall.com/lists/oss-security/2012/04/07/1
www.securityfocus.com/bid/52896
exchange.xforce.ibmcloud.com/vulnerabilities/74611