3 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files."...
CVE-2013-2036: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files."...
PT-2013-3516
Name of the Vulnerable Software and Affected Versions Drupal Filebrowser module versions 6.x-2.x before 6.x-2.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to lists of files. Recommendations...