CVE-2012-2709

CVE-2012-2709 is a duplicate of CVE-2012-2907. The connected records provide concrete details: an XSS vulnerability in the Aberdeen Drupal theme (aberdeen_breadcrumb in template.php) for Drupal 6.x-1.x, exploitable when the “Append the content title to the end of the breadcrumb” option is enabled...

CVE-2012-2907

The CVE-2012-2907 issue affects the Aberdeen theme for Drupal (versions 6.x-1.x prior to 6.x-1.11). The vulnerability arises in the aberdeen_breadcrumb function (template.php) when the option to append the content title to the breadcrumb is enabled, allowing remote attackers to inject arbitrary w...

SA-CONTRIB-2012-081 - Aberdeen - Cross Site Scripting

CVE: CVE-2012-2907. The Aberdeen theme provides a configurable breadcrumb which is commonly used as an additional navigation tool for users. The theme outputs the breadcrumb, but does not provide sufficient filtering to prevent a Cross site scripting XSS attack. This vulnerability is mitigated by...