Lucene search
MitreCVE-2010-0697HistoryFeb 23, 2010 - 8:30 p.m.
CVE-2010-0697
2010-02-2320:30:00
CWE-79
mitre
web.nvd.nist.gov
22
cve-2010-0697
cross-site scripting
xss
itweak upload
drupal
vulnerability
nvd
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
44.5%
Cross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users, with create content and upload file permissions, to inject arbitrary web script or HTML via the file name of an uploaded file.
Affected configurations
Node
ilya_ivanchenkoitweak_uploadMatch6.x-1.0
ORilya_ivanchenkoitweak_uploadMatch6.x-1.1
ORilya_ivanchenkoitweak_uploadMatch6.x-1.x-dev
ORilya_ivanchenkoitweak_uploadMatch6.x-2.0rc1
ORilya_ivanchenkoitweak_uploadMatch6.x-2.1
ORilya_ivanchenkoitweak_uploadMatch6.x-2.1rc2
ORilya_ivanchenkoitweak_uploadMatch6.x-2.2
ORilya_ivanchenkoitweak_uploadMatch6.x-2.x-dev
drupaldrupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ilya_ivanchenko | itweak_upload | 6.x-1.0 | cpe:2.3:a:ilya_ivanchenko:itweak_upload:6.x-1.0:*:*:*:*:*:*:* |
| ilya_ivanchenko | itweak_upload | 6.x-1.1 | cpe:2.3:a:ilya_ivanchenko:itweak_upload:6.x-1.1:*:*:*:*:*:*:* |
| ilya_ivanchenko | itweak_upload | 6.x-1.x-dev | cpe:2.3:a:ilya_ivanchenko:itweak_upload:6.x-1.x-dev:*:*:*:*:*:*:* |
| ilya_ivanchenko | itweak_upload | 6.x-2.0 | cpe:2.3:a:ilya_ivanchenko:itweak_upload:6.x-2.0:rc1:*:*:*:*:*:* |
| ilya_ivanchenko | itweak_upload | 6.x-2.1 | cpe:2.3:a:ilya_ivanchenko:itweak_upload:6.x-2.1:*:*:*:*:*:*:* |
| ilya_ivanchenko | itweak_upload | 6.x-2.1 | cpe:2.3:a:ilya_ivanchenko:itweak_upload:6.x-2.1:rc2:*:*:*:*:*:* |
| ilya_ivanchenko | itweak_upload | 6.x-2.2 | cpe:2.3:a:ilya_ivanchenko:itweak_upload:6.x-2.2:*:*:*:*:*:*:* |
| ilya_ivanchenko | itweak_upload | 6.x-2.x-dev | cpe:2.3:a:ilya_ivanchenko:itweak_upload:6.x-2.x-dev:*:*:*:*:*:*:* |
| drupal | drupal | * | cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2010-02-23 20:30:00
nvd
nvd
CVE-2010-0697
2010-02-23 20:30:00
cvelist
cvelist
CVE-2010-0697
2010-02-23 20:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
44.5%
Related for CVE-2010-0697