EUVD-2010-2017

Malware in sbrugna...

CVE-2010-1998

Cross-site scripting XSS vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers...

Cross site scripting

Cross-site scripting XSS vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers...

CVE-2010-1998

CVE-2010-1998 affects the Drupal CCK TableField module (6.x) prior to 6.x-1.2. The vulnerability is an XSS via table headers that remote authenticated users with certain node creation/editing privileges can exploit to inject arbitrary script/HTML. The NVD entry lists a low base score (CVSS2: 2.1,...

CVE-2010-1998: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers...