CVE-2013-5964

Cross-site scripting XSS vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web script or HTML via the flag title...

Cross site scripting

Cross-site scripting XSS vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web script or HTML via the flag title...

CVE-2013-5964

The CVE-2013-5964 entry describes a Cross-site scripting (XSS) vulnerability in the Drupal Flag module (7.x-3.x) prior to 7.x-3.1. The issue occurs on the administration page where remote authenticated users with the Administer flags permission can inject arbitrary web script or HTML through the ...

CVE-2013-5964

Cross-site scripting XSS vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web script or HTML via the flag title...

Drupal Node View Permissions module and Flag module Vulnerabilities

The drupal security team has released the following security advisories. https://drupal.org/node/2076315 https://drupal.org/node/2076221 Regards, Daniel http://www.itsecuritycenter.com/...

SA-CONTRIB-2013-071 - Flag - Cross Site Scripting

The Flag module allows creation of customizable flags on entities. Flag does not properly sanitize the name of a flag on the main flag administration page, allowing a malicious user to embed scripts within a page, resulting in a Cross-site Scripting XSS vulnerability. This vulnerability is...

Drupal Activity 6.x XSS Proof Of Concept

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploit for bespoke: Install and enable the Activity and Flag modules Add a new Flag with an arbitrary name at ?q=admin/build/flags/add On the resulting page ?q=admin/build/flags/add/node/name enter "alert'xss';" for the flag Title View the rendered...

Drupal flag module xss vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Summary Report Author: Justin C. Klein Keane [email protected] Disclosure URL: http://lampsecurity.org/drupal-flag-module-vulnerability Description of Vulnerability: - - ----------------------------- Drupal http://drupal.org is a robus...