CVE-2012-5553
Summary
| CVE | CVE-2012-5553 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-12-03 21:55:02 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the (1) Menu Title (2) Link Title, (3) Path Query, (4) Anchor, or (5) vocabulary names. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
SingleConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:H/Au:S/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Daniel Honrade | Om Maximenu | 6.x-1.0 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.0 | rc1 | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.0 | rc2 | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.0 | rc3 | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.0 | rc4 | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.0 | rc5 | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.0 | rc6 | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.0 | rc7 | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.1 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.10 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.11 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.12 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.13 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.14 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.15 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.16 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.17 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.18 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.19 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.2 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.20 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.21 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.22 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.23 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.24 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.25 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.26 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.27 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.28 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.29 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.3 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.30 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.31 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.32 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.33 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.34 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.35 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.36 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.37 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.38 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.39 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.4 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.40 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.41 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.42 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.43 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.5 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.6 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.7 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.8 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.9 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 6.x-1.x | dev | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.0 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.1 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.10 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.11 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.12 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.13 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.14 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.15 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.16 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.17 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.18 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.19 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.2 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.20 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.21 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.22 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.23 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.24 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.25 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.26 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.27 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.28 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.29 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.3 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.30 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.31 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.32 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.33 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.34 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.35 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.36 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.37 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.38 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.39 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.4 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.40 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.41 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.42 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.43 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.5 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.6 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.7 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.8 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.9 | All | All | All |
| Application | Daniel Honrade | Om Maximenu | 7.x-1.x | dev | All | All |
| Application | Drupal | Drupal | - | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SA-CONTRIB-2012-160 - OM Maximenu - Cross Site Scripting (XSS) | drupal.org | af854a3a-2127-422b-91ae-364da2661108 | drupal.org | Patch, Vendor Advisory |
| Mad Irish :: Drupal OM Maximenu Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.madirish.net | |
| oss-security - Re: CVE Request for Drupal Contributed Modules | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| om_maximenu 7.x-1.44 | drupal.org | af854a3a-2127-422b-91ae-364da2661108 | drupal.org | Patch |
| om_maximenu 6.x-1.44 | drupal.org | af854a3a-2127-422b-91ae-364da2661108 | drupal.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.