CVE-2012-4469 in Simon Rycroft Hashcash
Resumen (Inglés)
Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.2 for Drupal, when "Log failed hashcash" is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid token, which is not properly handled when administrators use the Database logging module.
Reservar
2012-08-21
Divulgación
2012-11-30
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 63092 | Simon Rycroft Hashcash secuencias de comandos en sitios cruzados | 79 | No está definido | Arreglo oficial | CVE-2012-4469 |