CVE-2012-4485

🗓️ 31 Oct 2012 16:02:55Reported by [email protected]Type

The galleryformatter_field_formatter_view function in galleryformatter.tpl.php in Gallery formatter module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via title or alt parameter (CVE-2012-4485)

Reporter	Title	Published	Views	Family All 3
Prion	Cross site scripting	31 Oct 201216:55	–	prion
CVE	CVE-2012-4485	31 Oct 201216:55	–	cve
Cvelist	CVE-2012-4485	31 Oct 201216:00	–	cvelist

Nvd

Node

manuel_garcia galleryformatterRange≤7.x-1.1

manuel_garcia galleryformatterMatch6.x-1.0rc1

manuel_garcia galleryformatterMatch6.x-1.0rc2

manuel_garcia galleryformatterMatch6.x-1.0rc3

manuel_garcia galleryformatterMatch6.x-1.0rc4

manuel_garcia galleryformatterMatch6.x-1.xdev

manuel_garcia galleryformatterMatch7.x-1.0

manuel_garcia galleryformatterMatch7.x-1.xdev

AND

drupal drupalMatch-

Source	Link
openwall	www.openwall.com/lists/oss-security/2012/10/04/6
drupal	www.drupal.org/node/1699744
drupalcode	www.drupalcode.org/project/galleryformatter.git/commitdiff/b0392a1
drupal	www.drupal.org/node/1700578
securityfocus	www.securityfocus.com/bid/54674
openwall	www.openwall.com/lists/oss-security/2012/10/07/1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Oct 2012 16:55Current

5.5Medium risk

Vulners AI Score5.5

CVSS24.3

EPSS0.00359

CWE-79