Vulners
Lucene search
2 matches found
CVE-2011-0771
The Janrain Engage formerly RPX module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticated users to conduct cross-site scripting XSS attacks and possibly execute arbitrary PHP code by causing a crafted avatar to be downloaded from an external login...
6.8CVSS6.1AI score0.02062EPSS
SaveExploits0References6
Cross site scripting
The Janrain Engage formerly RPX module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticated users to conduct cross-site scripting XSS attacks and possibly execute arbitrary PHP code by causing a crafted avatar to be downloaded from an external login...
6.8CVSS6.4AI score0.02062EPSS
SaveExploits0References6Affected Software1
20