Lucene search

[email protected]CVE-2010-1958

HistoryJun 21, 2010 - 7:30 p.m.

CVE-2010-1958

2010-06-2119:30:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2010-1958

xss

filefield module

drupal

nvd

2.1 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.6%

JSON

Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and ‘Path to File’ or ‘URL to File’ display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).

Affected configurations

NVD

Node

drupaldrupal

AND

quicksketchfilefieldMatch5.x-1.x-dev

quicksketchfilefieldMatch5.x-2.0

quicksketchfilefieldMatch5.x-2.1

quicksketchfilefieldMatch5.x-2.2

quicksketchfilefieldMatch5.x-2.3

quicksketchfilefieldMatch5.x-2.3rc2

quicksketchfilefieldMatch5.x-2.3rc3

quicksketchfilefieldMatch5.x-2.3rc4

quicksketchfilefieldMatch5.x-2.4

quicksketchfilefieldMatch5.x-2.x-dev

quicksketchfilefieldMatch6.x-1.0alpha1

quicksketchfilefieldMatch6.x-1.0alpha2

quicksketchfilefieldMatch6.x-1.0alpha3

quicksketchfilefieldMatch6.x-1.0beta1

quicksketchfilefieldMatch6.x-1.0beta2

quicksketchfilefieldMatch6.x-1.0beta3

quicksketchfilefieldMatch6.x-3.0

quicksketchfilefieldMatch6.x-3.0alpha1

quicksketchfilefieldMatch6.x-3.0alpha2

quicksketchfilefieldMatch6.x-3.0alpha3

quicksketchfilefieldMatch6.x-3.0alpha4

quicksketchfilefieldMatch6.x-3.0alpha5

quicksketchfilefieldMatch6.x-3.0alpha6

quicksketchfilefieldMatch6.x-3.0alpha7

quicksketchfilefieldMatch6.x-3.0beta1

quicksketchfilefieldMatch6.x-3.0beta2

quicksketchfilefieldMatch6.x-3.0beta3

quicksketchfilefieldMatch6.x-3.0rc1

quicksketchfilefieldMatch6.x-3.1

quicksketchfilefieldMatch6.x-3.2

quicksketchfilefieldMatch6.x-3.3

quicksketchfilefieldMatch6.x-3.5

quicksketchfilefieldMatch6.x-3.x-dev

CPENameOperatorVersion
quicksketch:filefieldquicksketch filefieldeq5.x-1.x-dev
quicksketch:filefieldquicksketch filefieldeq5.x-2.0
quicksketch:filefieldquicksketch filefieldeq5.x-2.1
quicksketch:filefieldquicksketch filefieldeq5.x-2.2
quicksketch:filefieldquicksketch filefieldeq5.x-2.3
quicksketch:filefieldquicksketch filefieldeq5.x-2.4
quicksketch:filefieldquicksketch filefieldeq5.x-2.x-dev
quicksketch:filefieldquicksketch filefieldeq6.x-1.0
quicksketch:filefieldquicksketch filefieldeq6.x-3.0
quicksketch:filefieldquicksketch filefieldeq6.x-3.1

CPE	Name	Operator	Version
quicksketch:filefield	quicksketch filefield	eq	5.x-1.x-dev
quicksketch:filefield	quicksketch filefield	eq	5.x-2.0
quicksketch:filefield	quicksketch filefield	eq	5.x-2.1
quicksketch:filefield	quicksketch filefield	eq	5.x-2.2
quicksketch:filefield	quicksketch filefield	eq	5.x-2.3
quicksketch:filefield	quicksketch filefield	eq	5.x-2.4
quicksketch:filefield	quicksketch filefield	eq	5.x-2.x-dev
quicksketch:filefield	quicksketch filefield	eq	6.x-1.0
quicksketch:filefield	quicksketch filefield	eq	6.x-3.0
quicksketch:filefield	quicksketch filefield	eq	6.x-3.1

Rows per page:

1-10 of 141

References

drupal.org/node/829808

osvdb.org/65611

secunia.com/advisories/40186

www.madirish.net/?article=461

www.securityfocus.com/bid/40923

exchange.xforce.ibmcloud.com/vulnerabilities/59500

2.1 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.6%

JSON

Related for CVE-2010-1958

prion1 nvd1 cvelist1