Cross site scripting

2010-05-2017:30:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with “administer biblio” privileges, to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1358.

CPENameOperatorVersion
bibliographyeq5.120.10
bibliographyeq5.120.11
bibliographyeq5.120.110
bibliographyeq5.120.111
bibliographyeq5.120.112
bibliographyeq5.120.113
bibliographyeq5.120.114
bibliographyeq5.120.115
bibliographyeq5.120.116
bibliographyeq5.120.117

Name	Operator	Version
bibliography	eq	5.120.10
bibliography	eq	5.120.11
bibliography	eq	5.120.110
bibliography	eq	5.120.111
bibliography	eq	5.120.112
bibliography	eq	5.120.113
bibliography	eq	5.120.114
bibliography	eq	5.120.115
bibliography	eq	5.120.116
bibliography	eq	5.120.117

Rows per page:

1-10 of 321

References

secunia.com/advisories/39810

www.securityfocus.com/bid/40127

drupal.org/node/796498

drupal.org/node/796502

drupal.org/node/797192