Lucene search
MitreCVE-2015-4358HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4358
2015-06-1514:59:12
CWE-79
mitre
web.nvd.nist.gov
24
cve-2015-4358
cross-site scripting
xss
ubercart
discount coupons
drupal
administration pages
remote authenticated users
permissions
taxonomy terms
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
41.9%
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.
Affected configurations
Node
ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.0drupal
ORubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.1drupal
ORubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.2drupal
ORubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.3drupal
ORubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.4drupal
ORubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.5drupal
ORubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.6drupal
ORubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.7drupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ubercart_discount_coupons_project | ubercart_discount_coupons | 6.x-1.0 | cpe:2.3:a:ubercart_discount_coupons_project:ubercart_discount_coupons:6.x-1.0:*:*:*:*:drupal:*:* |
| ubercart_discount_coupons_project | ubercart_discount_coupons | 6.x-1.1 | cpe:2.3:a:ubercart_discount_coupons_project:ubercart_discount_coupons:6.x-1.1:*:*:*:*:drupal:*:* |
| ubercart_discount_coupons_project | ubercart_discount_coupons | 6.x-1.2 | cpe:2.3:a:ubercart_discount_coupons_project:ubercart_discount_coupons:6.x-1.2:*:*:*:*:drupal:*:* |
| ubercart_discount_coupons_project | ubercart_discount_coupons | 6.x-1.3 | cpe:2.3:a:ubercart_discount_coupons_project:ubercart_discount_coupons:6.x-1.3:*:*:*:*:drupal:*:* |
| ubercart_discount_coupons_project | ubercart_discount_coupons | 6.x-1.4 | cpe:2.3:a:ubercart_discount_coupons_project:ubercart_discount_coupons:6.x-1.4:*:*:*:*:drupal:*:* |
| ubercart_discount_coupons_project | ubercart_discount_coupons | 6.x-1.5 | cpe:2.3:a:ubercart_discount_coupons_project:ubercart_discount_coupons:6.x-1.5:*:*:*:*:drupal:*:* |
| ubercart_discount_coupons_project | ubercart_discount_coupons | 6.x-1.6 | cpe:2.3:a:ubercart_discount_coupons_project:ubercart_discount_coupons:6.x-1.6:*:*:*:*:drupal:*:* |
| ubercart_discount_coupons_project | ubercart_discount_coupons | 6.x-1.7 | cpe:2.3:a:ubercart_discount_coupons_project:ubercart_discount_coupons:6.x-1.7:*:*:*:*:drupal:*:* |
Related
prion
prion
Cross site scripting
2015-06-15 14:59:00
cvelist
cvelist
CVE-2015-4358
2015-06-15 14:00:00
drupal
drupal
SA-CONTRIB-2015-064 - Ubercart Discount Coupons - Cross Site Scripting (XSS)
2015-03-04 00:00:00
nvd
nvd
CVE-2015-4358
2015-06-15 14:59:12
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
41.9%
Related for CVE-2015-4358