4 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the hostingtasklogtable function in modules/hosting/task/hostingtask.module in the Hostmaster Aegir module 6.x-1.x before 6.x-1.9 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a Drush log...
CVE-2012-2708: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the hostingtasklogtable function in modules/hosting/task/hostingtask.module in the Hostmaster Aegir module 6.x-1.x before 6.x-1.9 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a Drush log...
PT-2012-4199
Name of the Vulnerable Software and Affected Versions Hostmaster Aegir module versions 6.x-1.x through 6.x-1.8 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the hosting task log table function in the hosting task.module file. Remote authenticated users...
CVE-2012-2708
Cross-site scripting XSS vulnerability in the hostingtasklogtable function in modules/hosting/task/hostingtask.module in the Hostmaster Aegir module 6.x-1.x before 6.x-1.9 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a Drush log...