49 matches found
CVE-2009-3915
Cross-site scripting XSS vulnerability in the "Separate title and URL" formatter in the Link module 5.x before 5.x-2.6 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the link title field...
CVE-2009-3915
CVE-2009-3915 affects the Drupal Link module’s “Separate title and URL” formatter. The root cause is a cross-site scripting (XSS) vulnerability in the link title field, enabling remote attackers to inject arbitrary script/HTML. Affected versions are 5.x prior to 5.x-2.6 and 6.x prior to 6.x-2.7. ...
CVE-2009-3915
Cross-site scripting XSS vulnerability in the "Separate title and URL" formatter in the Link module 5.x before 5.x-2.6 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the link title field...
CVE-2009-3915: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the "Separate title and URL" formatter in the Link module 5.x before 5.x-2.6 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the link title field...
SA-CONTRIB-2009-096 - Link - Cross Site Scripting
The Link module provides a CCK field which enables links to be added to content types, that can include a URL, title, and target attribute. When using the "Separate title and URL" formatter supplied by the module, the link title field is not sanitized before being displayed, leading to a Cross Si...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter aka the Help field. NOTE: some of these details are...
CVE-2009-0603
The CVE-2009-0603 entry concerns a Cross-site Scripting (XSS) vulnerability in the Drupal Link module 5.x-2.5 for Drupal 5.10 (index.php). The underlying issue allows remote authenticated users who have the "administer content types" privilege to inject arbitrary script/HTML via the description p...
CVE-2009-0603
Cross-site scripting XSS vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter aka the Help field. NOTE: some of these details are...
