Lucene search
PRIOn knowledge basePRION:CVE-2011-0771HistoryFeb 04, 2011 - 1:00 a.m.
Cross site scripting
2011-02-0401:00:00
PRIOn knowledge base
www.prio-n.com
1
The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks and possibly execute arbitrary PHP code by causing a crafted avatar to be downloaded from an external login provider site.
Related
cvelist
cvelist
CVE-2011-0771
2011-02-04 00:00:00
cve
cve
CVE-2011-0771
2011-02-04 01:00:08
nvd
nvd
CVE-2011-0771
2011-02-04 01:00:08