26 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the aberdeenbreadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a...
CVE-2012-2907
Cross-site scripting XSS vulnerability in the aberdeenbreadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a...
CVE-2012-2907
Cross-site scripting XSS vulnerability in the aberdeenbreadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a...
CVE-2012-2907: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the aberdeenbreadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a...
PT-2012-4353
Name of the Vulnerable Software and Affected Versions Aberdeen theme versions 6.x-1.x before 6.x-1.11 Description The issue is related to a cross-site scripting XSS vulnerability in the aberdeen breadcrumb function. This function is located in template.php in the Aberdeen theme for Drupal. When t...
SA-CONTRIB-2012-081 - Aberdeen - Cross Site Scripting
CVE: CVE-2012-2907. The Aberdeen theme provides a configurable breadcrumb which is commonly used as an additional navigation tool for users. The theme outputs the breadcrumb, but does not provide sufficient filtering to prevent a Cross site scripting XSS attack. This vulnerability is mitigated by...