Lucene search
HistoryJun 21, 2010 - 7:30 p.m.
CVE-2010-1958
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
43.5%
Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and ‘Path to File’ or ‘URL to File’ display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).
Affected configurations
Node
drupaldrupal
quicksketchfilefieldMatch5.x-1.x-dev
ORquicksketchfilefieldMatch5.x-2.0
ORquicksketchfilefieldMatch5.x-2.1
ORquicksketchfilefieldMatch5.x-2.2
ORquicksketchfilefieldMatch5.x-2.3
ORquicksketchfilefieldMatch5.x-2.3rc2
ORquicksketchfilefieldMatch5.x-2.3rc3
ORquicksketchfilefieldMatch5.x-2.3rc4
ORquicksketchfilefieldMatch5.x-2.4
ORquicksketchfilefieldMatch5.x-2.x-dev
ORquicksketchfilefieldMatch6.x-1.0alpha1
ORquicksketchfilefieldMatch6.x-1.0alpha2
ORquicksketchfilefieldMatch6.x-1.0alpha3
ORquicksketchfilefieldMatch6.x-1.0beta1
ORquicksketchfilefieldMatch6.x-1.0beta2
ORquicksketchfilefieldMatch6.x-1.0beta3
ORquicksketchfilefieldMatch6.x-3.0
ORquicksketchfilefieldMatch6.x-3.0alpha1
ORquicksketchfilefieldMatch6.x-3.0alpha2
ORquicksketchfilefieldMatch6.x-3.0alpha3
ORquicksketchfilefieldMatch6.x-3.0alpha4
ORquicksketchfilefieldMatch6.x-3.0alpha5
ORquicksketchfilefieldMatch6.x-3.0alpha6
ORquicksketchfilefieldMatch6.x-3.0alpha7
ORquicksketchfilefieldMatch6.x-3.0beta1
ORquicksketchfilefieldMatch6.x-3.0beta2
ORquicksketchfilefieldMatch6.x-3.0beta3
ORquicksketchfilefieldMatch6.x-3.0rc1
ORquicksketchfilefieldMatch6.x-3.1
ORquicksketchfilefieldMatch6.x-3.2
ORquicksketchfilefieldMatch6.x-3.3
ORquicksketchfilefieldMatch6.x-3.5
ORquicksketchfilefieldMatch6.x-3.x-dev
| Vendor | Product | Version | CPE |
|---|---|---|---|
| drupal | drupal | * | cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-1.x-dev | cpe:2.3:a:quicksketch:filefield:5.x-1.x-dev:*:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-2.0 | cpe:2.3:a:quicksketch:filefield:5.x-2.0:*:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-2.1 | cpe:2.3:a:quicksketch:filefield:5.x-2.1:*:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-2.2 | cpe:2.3:a:quicksketch:filefield:5.x-2.2:*:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-2.3 | cpe:2.3:a:quicksketch:filefield:5.x-2.3:*:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-2.3 | cpe:2.3:a:quicksketch:filefield:5.x-2.3:rc2:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-2.3 | cpe:2.3:a:quicksketch:filefield:5.x-2.3:rc3:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-2.3 | cpe:2.3:a:quicksketch:filefield:5.x-2.3:rc4:*:*:*:*:*:* |
| quicksketch | filefield | 5.x-2.4 | cpe:2.3:a:quicksketch:filefield:5.x-2.4:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2010-06-21 19:30:00
cvelist
cvelist
CVE-2010-1958
2010-06-21 19:00:00
cve
cve
CVE-2010-1958
2010-06-21 19:30:01
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
43.5%
Related for NVD:CVE-2010-1958