Lucene search
HistoryJan 19, 2014 - 5:16 p.m.
CVE-2013-0244
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.0%
Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are vulnerable to CVE-2011-4969, allows remote attackers to inject arbitrary web script or HTML via vectors involving unspecified Javascript functions that are used to select DOM elements.
Affected configurations
Node
drupaldrupalMatch7.0
ORdrupaldrupalMatch7.0alpha1
ORdrupaldrupalMatch7.0alpha2
ORdrupaldrupalMatch7.0alpha3
ORdrupaldrupalMatch7.0alpha4
ORdrupaldrupalMatch7.0alpha5
ORdrupaldrupalMatch7.0alpha6
ORdrupaldrupalMatch7.0alpha7
ORdrupaldrupalMatch7.0beta1
ORdrupaldrupalMatch7.0beta2
ORdrupaldrupalMatch7.0beta3
ORdrupaldrupalMatch7.0dev
ORdrupaldrupalMatch7.0rc1
ORdrupaldrupalMatch7.0rc2
ORdrupaldrupalMatch7.0rc3
ORdrupaldrupalMatch7.0rc4
ORdrupaldrupalMatch7.1
ORdrupaldrupalMatch7.2
ORdrupaldrupalMatch7.3
ORdrupaldrupalMatch7.4
ORdrupaldrupalMatch7.5
ORdrupaldrupalMatch7.6
ORdrupaldrupalMatch7.7
ORdrupaldrupalMatch7.8
ORdrupaldrupalMatch7.9
ORdrupaldrupalMatch7.10
ORdrupaldrupalMatch7.11
ORdrupaldrupalMatch7.12
ORdrupaldrupalMatch7.13
ORdrupaldrupalMatch7.14
ORdrupaldrupalMatch7.15
ORdrupaldrupalMatch7.16
ORdrupaldrupalMatch7.17
ORdrupaldrupalMatch7.18
ORdrupaldrupalMatch7.x-dev
Node
drupaldrupalMatch6.0
ORdrupaldrupalMatch6.0beta1
ORdrupaldrupalMatch6.0beta2
ORdrupaldrupalMatch6.0beta3
ORdrupaldrupalMatch6.0beta4
ORdrupaldrupalMatch6.0dev
ORdrupaldrupalMatch6.0rc1
ORdrupaldrupalMatch6.0rc2
ORdrupaldrupalMatch6.0rc3
ORdrupaldrupalMatch6.0rc4
ORdrupaldrupalMatch6.1
ORdrupaldrupalMatch6.2
ORdrupaldrupalMatch6.3
ORdrupaldrupalMatch6.4
ORdrupaldrupalMatch6.5
ORdrupaldrupalMatch6.6
ORdrupaldrupalMatch6.7
ORdrupaldrupalMatch6.8
ORdrupaldrupalMatch6.9
ORdrupaldrupalMatch6.10
ORdrupaldrupalMatch6.11
ORdrupaldrupalMatch6.12
ORdrupaldrupalMatch6.13
ORdrupaldrupalMatch6.14
ORdrupaldrupalMatch6.15
ORdrupaldrupalMatch6.16
ORdrupaldrupalMatch6.17
ORdrupaldrupalMatch6.18
ORdrupaldrupalMatch6.19
ORdrupaldrupalMatch6.20
ORdrupaldrupalMatch6.21
ORdrupaldrupalMatch6.22
ORdrupaldrupalMatch6.23
ORdrupaldrupalMatch6.24
ORdrupaldrupalMatch6.25
ORdrupaldrupalMatch6.26
ORdrupaldrupalMatch6.27
Related
debiancve
debiancve
CVE-2013-0244
2014-01-19 17:16:00
CVE-2011-4969
2013-03-08 22:55:01
ubuntucve
ubuntucve
CVE-2013-0244
2014-01-19 00:00:00
CVE-2011-4969
2013-01-30 00:00:00
cve
cve
prion
prion
Cross site scripting
2014-01-19 17:16:00
Cross site scripting
2013-03-08 22:55:00
Design/Logic Flaw
2020-02-05 19:15:00
cvelist
cvelist
CVE-2013-0244
2014-01-19 17:00:00
CVE-2011-4969
2013-03-08 22:00:00
openvas
openvas
Ubuntu Update for jquery USN-1722-1
2013-02-15 00:00:00
Ubuntu: Security Advisory (USN-1722-1)
2013-02-15 00:00:00
jQuery < 1.6.3 XSS Vulnerability
2018-11-01 00:00:00
ubuntu
ubuntu
jQuery vulnerability
2013-02-13 00:00:00
osv
osv
jQuery vulnerable to Cross-Site Scripting (XSS)
2022-05-14 01:09:51
f5
f5
K16967 : XSS vulnerability in jQuery CVE-2011-4969
2015-08-26 00:00:00
SOL16967 - XSS vulnerability in jQuery CVE-2011-4969
2015-08-26 00:00:00
nessus
nessus
JQuery 1.6.x < 1.6.3 XSS
2018-02-07 00:00:00
Ubuntu 10.04 LTS / 11.10 : jquery vulnerability (USN-1722-1)
2013-02-14 00:00:00
Drupal 6.x < 6.28 / 7.x < 7.19 Multiple Vulnerabilities
2013-01-24 00:00:00
securityvulns
securityvulns
[USN-1722-1] jQuery vulnerability
2013-02-18 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-02-18 00:00:00
[SECURITY] [DSA 2776-1] drupal6 security update
2013-10-13 00:00:00
nvd
nvd
CVE-2011-4969
2013-03-08 22:55:01
CVE-2013-5989
2020-02-05 19:15:10
github
github
jQuery vulnerable to Cross-Site Scripting (XSS)
2022-05-14 01:09:51
jvn
jvn
JVN#28467717: Page Scroller vulnerable to cross-site scripting
2013-11-07 00:00:00
drupal
drupal
SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities
2013-01-16 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DSA 2776-1] drupal6 security update
2013-10-11 14:32:46
kitploit
kitploit
freebsd
freebsd
jenkins -- multiple vulnerabilities
2017-02-01 00:00:00
ics
ics
Pepperl+Fuchs WirelessHART-Gateway
2022-04-07 12:00:00
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.0%
Related for NVD:CVE-2013-0244