CVE-2012-6583

CVE-2012-6583

EPSS 1.0%

Cross-site scripting (XSS) vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer imagemenu" permission to inject arbitrary web script or HTML via an image file name.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/85679 https://drupal.org/node/1788726 https://drupal.org/node/1789260 http://secunia.com/advisories/50683 https://exchange.xforce.ibmcloud.com/vulnerabilities/78697 http://www.securityfocus.com/bid/55610