Lucene search
Redhat.comRH:CVE-2008-6170HistoryOct 04, 2019 - 8:58 p.m.
CVE-2008-6170
2019-10-0420:58:31
redhat.com
access.redhat.com
8
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
46.2%
Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title.
Related
nvd
nvd
CVE-2008-6170
2009-02-19 15:30:00
cve
cve
CVE-2008-6170
2009-02-19 15:30:00
openvas
openvas
FreeBSD Ports: drupal5
2008-11-01 00:00:00
FreeBSD Ports: drupal5
2008-11-01 00:00:00
nessus
nessus
FreeBSD : drupal -- multiple vulnerabilities (706c9eef-a077-11dd-b413-001372fd0af2)
2008-10-24 00:00:00
Fedora 9 : drupal-6.6-1.fc9 (2008-9213)
2008-10-31 00:00:00
Fedora 8 : drupal-5.12-1.fc8 (2008-9170)
2008-10-27 00:00:00
freebsd
freebsd
drupal -- multiple vulnerabilities
2008-10-22 00:00:00
cvelist
cvelist
CVE-2008-6170
2009-02-19 15:02:00
prion
prion
Cross site scripting
2009-02-19 15:30:00
ubuntucve
ubuntucve
CVE-2008-6170
2009-02-19 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
46.2%
Related for RH:CVE-2008-6170