Lucene search

[email protected]NVD:CVE-2012-2071

HistoryAug 14, 2012 - 11:55 p.m.

CVE-2012-2071

2012-08-1423:55:01

CWE-79

[email protected]

web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

JSON

Cross-site scripting (XSS) vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

geoff_daviescontact_formsMatch6.x-1.1

geoff_daviescontact_formsMatch6.x-1.2

geoff_daviescontact_formsMatch6.x-1.3

geoff_daviescontact_formsMatch6.x-1.4

geoff_daviescontact_formsMatch6.x-1.5

geoff_daviescontact_formsMatch6.x-1.6

geoff_daviescontact_formsMatch6.x-1.7

geoff_daviescontact_formsMatch6.x-1.8

geoff_daviescontact_formsMatch6.x-1.9

geoff_daviescontact_formsMatch6.x-1.10

geoff_daviescontact_formsMatch6.x-1.11

geoff_daviescontact_formsMatch6.x-1.12

geoff_daviescontact_formsMatch6.x-1.xdev

AND

drupaldrupalMatch-

References

drupal.org/node/1506330

drupal.org/node/1506404

osvdb.org/80674

secunia.com/advisories/48583

www.openwall.com/lists/oss-security/2012/04/07/1

www.securityfocus.com/bid/52801

exchange.xforce.ibmcloud.com/vulnerabilities/74467

2.1 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

JSON

Related for NVD:CVE-2012-2071

cve1 drupal1 prion1 cvelist1 atlassian3