CVE-2012-1652

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 19/09/2012 Updated: 29/08/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:N/AC:H/Au:S/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x prior to 6.x-3.8 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via unspecified vectors related to "the vocabulary's help text."

Vulnerable Product	Search on Vulmon	Subscribe to Product
wim_leers hierarchical_select 6.x-3.1
wim_leers hierarchical_select 6.x-3.0
wim_leers hierarchical_select 6.x-3.2
wim_leers hierarchical_select 6.x-3.3
wim_leers hierarchical_select 6.x-3.x
wim_leers hierarchical_select 6.x-3.6
wim_leers hierarchical_select 6.x-3.7
wim_leers hierarchical_select 6.x-3.4
wim_leers hierarchical_select 6.x-3.5
wimleers hierarchical_select 6.x-3.x
wimleers hierarchical_select 6.x-3.1
wimleers hierarchical_select 6.x-3.0

CWE-79 http://drupalcode.org/project/hierarchical_select.git/commit/be32dceb17d25553e474c295a8c3db69eab95cee http://www.openwall.com/lists/oss-security/2012/04/07/1 http://drupal.org/node/1461318 http://secunia.com/advisories/48235 http://drupal.org/node/1461724 http://osvdb.org/79683 http://www.securityfocus.com/bid/52228 https://exchange.xforce.ibmcloud.com/vulnerabilities/73611 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-1652

Vulnerability Summary

References

Vulmon Search

About

Products

Connect