3 matches found
CVE-2012-6572
The CVE-2012-6572 vulnerability affects the Drupal Inf08 theme (6.x-1.x) prior to 6.x-1.10, where the function phptemplate_preprocess_node in template.php is exploitable. The issue allows remote authenticated users who have the administer taxonomy permission to inject arbitrary web script or HTML...
CVE-2012-6572
Cross-site scripting XSS vulnerability in the phptemplatepreprocessnode function in template.php in the Inf08 theme 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary name...
CVE-2012-6572: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the phptemplatepreprocessnode function in template.php in the Inf08 theme 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary name...