80 matches found
CVE-2010-2000
CVE-2010-2000 describes a cross-site scripting (XSS) vulnerability in Drupal’s Bibliography (Biblio) module affecting 5.x up to 5.x-1.17 and 6.x up to 6.x-1.9. The issue allows remote authenticated users possessing the “administer biblio” privilege to inject arbitrary web script or HTML via unspe...
SA-CONTRIB-2010-044: Bibliography - Cross Site Scripting
The Bibliography module enables users to manage and display lists of scholarly publications. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. This is mitigated by the fact that only users with the 'administer...
CVE-2010-1358
Cross-site scripting XSS vulnerability in the Bibliography Biblio module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Bibliography Biblio module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-1358
The CVE-2010-1358 entry concerns Drupal’s Bibliography (Biblio) module. Affected versions are 5.x up to 5.x-1.17 and 6.x up to 6.x-1.9. The vulnerability is a cross-site scripting (XSS) issue that allows remote authenticated users who have the administer biblio privilege to inject arbitrary web s...
CVE-2010-1358
Cross-site scripting XSS vulnerability in the Bibliography Biblio module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors...
SA-CONTRIB-2010-006 - Bibliography Module - Cross Site Scripting
The Bibliography module enables users to manage and display lists of scholarly publications. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Only users with the 'administer biblio' permission are able to exploi...
CVE-2009-3479
Cross-site scripting XSS vulnerability in Bibliography Biblio 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title...
Cross site scripting
Cross-site scripting XSS vulnerability in Bibliography Biblio 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title...
CVE-2009-3488
Cross-site scripting XSS vulnerability in the Bibliography aka Biblio module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479...
Cross site scripting
Cross-site scripting XSS vulnerability in the Bibliography aka Biblio module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479...
CVE-2009-3479
Cross-site scripting XSS vulnerability in Bibliography Biblio 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title...
CVE-2009-3488
Cross-site scripting XSS vulnerability in the Bibliography aka Biblio module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479...
CVE-2009-3488
CVE-2009-3488 describes a cross-site scripting (XSS) vulnerability in Drupal’s Bibliography (Biblio) module, version 6.x-1.6, where remote authenticated users with content-creation privileges can inject arbitrary scripts or HTML via the Title field. The connected records corroborate a related XSS...
CVE-2009-3479
CVE-2009-3479 documents an XSS vulnerability in the Drupal Bibliography (Biblio) module. Affected: Drupal Bibliography 5.x (before 5.x-1.17) and 6.x (before 6.x-1.6). The flaw allows remote attackers with the permission to create content displayed by the Bibliography module to inject arbitrary we...
SA-CONTRIB-2009-064 - Bibliography module - Cross Site Scripting
The Bibliography module also known as Biblio allows users manage and display lists of scholarly publications. The Biblio module creates customized views in order to display these listings, and these listings contain text entered by users with the 'create biblio' permission. In some cases, the...
SA-CONTRIB-2009-048 - Bibliography Module - Cross Site Scripting
The Bibliography module Biblio allows users to manage and display lists of scholarly publications. The module contains a cross site scripting vulnerability because it does not properly sanitize output of titles before display. A user who has the permission to create content displayed by the...
CVE-2009-1284
Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...