Lucene search
MitreCVE-2015-4346HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4346
2015-06-1514:59:02
CWE-79
mitre
web.nvd.nist.gov
22
cve-2015-4346
cross-site scripting
xss
sms framework module
drupal
security vulnerability
nvd
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
60.3%
Cross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the “Send to phone” submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews.
Affected configurations
Node
sms_framework_projectsms_frameworkMatch6.x-1.0drupal
ORsms_framework_projectsms_frameworkMatch6.x-1.1drupal
ORsms_framework_projectsms_frameworkMatch6.x-2.0-alpha1drupal
ORsms_framework_projectsms_frameworkMatch6.x-2.x-devdrupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sms_framework_project | sms_framework | 6.x-1.0 | cpe:2.3:a:sms_framework_project:sms_framework:6.x-1.0:*:*:*:*:drupal:*:* |
| sms_framework_project | sms_framework | 6.x-1.1 | cpe:2.3:a:sms_framework_project:sms_framework:6.x-1.1:*:*:*:*:drupal:*:* |
| sms_framework_project | sms_framework | 6.x-2.0-alpha1 | cpe:2.3:a:sms_framework_project:sms_framework:6.x-2.0-alpha1:*:*:*:*:drupal:*:* |
| sms_framework_project | sms_framework | 6.x-2.x-dev | cpe:2.3:a:sms_framework_project:sms_framework:6.x-2.x-dev:*:*:*:*:drupal:*:* |
Related
drupal
drupal
SA-CONTRIB-2015-054 - SMS Framework - Cross Site Scripting (XSS)
2015-02-25 00:00:00
prion
prion
Cross site scripting
2015-06-15 14:59:00
nvd
nvd
CVE-2015-4346
2015-06-15 14:59:02
cvelist
cvelist
CVE-2015-4346
2015-06-15 14:00:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
60.3%
Related for CVE-2015-4346