Lucene search
Ubuntu.comUB:CVE-2008-6170HistoryFeb 19, 2009 - 12:00 a.m.
CVE-2008-6170
2009-02-1900:00:00
ubuntu.com
ubuntu.com
7
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
EPSS
0.001
Percentile
46.2%
Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x
before 6.6 allows remote authenticated users with create book content or
edit node book hierarchy permissions to inject arbitrary web script or HTML
via the book page title.
Notes
| Author | Note |
|---|---|
| mdeslaur | SA-2008-067 |
Related
redhatcve
redhatcve
CVE-2008-6170
2019-10-04 20:58:31
nvd
nvd
CVE-2008-6170
2009-02-19 15:30:00
cve
cve
CVE-2008-6170
2009-02-19 15:30:00
openvas
openvas
FreeBSD Ports: drupal5
2008-11-01 00:00:00
FreeBSD Ports: drupal5
2008-11-01 00:00:00
nessus
nessus
FreeBSD : drupal -- multiple vulnerabilities (706c9eef-a077-11dd-b413-001372fd0af2)
2008-10-24 00:00:00
Fedora 9 : drupal-6.6-1.fc9 (2008-9213)
2008-10-31 00:00:00
Fedora 8 : drupal-5.12-1.fc8 (2008-9170)
2008-10-27 00:00:00
freebsd
freebsd
drupal -- multiple vulnerabilities
2008-10-22 00:00:00
cvelist
cvelist
CVE-2008-6170
2009-02-19 15:02:00
prion
prion
Cross site scripting
2009-02-19 15:30:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
EPSS
0.001
Percentile
46.2%
Related for UB:CVE-2008-6170