CVE-2008-6972 in CCK

Riassunto

di MITRE

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via the (1) "field label," (2) "help text," or (3) "allowed values" settings.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 13/08/2009
• Divulgazione: 13/08/2009
• Moderazione: accettato
• Voce: VDB-49411
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00868
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-6972
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-6972
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-6972/