Cctags CVE-2012-2310 Cross-Site Scripting Vulnerability
BID:73516
Info
Cctags CVE-2012-2310 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73516 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-2310 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2012 12:00AM |
| Updated: | Jul 25 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Oleg Kovalchuk Cctags 7.X-1.X Dev Oleg Kovalchuk Cctags 7.x-1.9 Oleg Kovalchuk Cctags 7.x-1.8 Oleg Kovalchuk Cctags 7.x-1.7 Oleg Kovalchuk Cctags 7.x-1.6 Oleg Kovalchuk Cctags 7.x-1.5 Oleg Kovalchuk Cctags 7.x-1.4 Oleg Kovalchuk Cctags 7.x-1.3 Oleg Kovalchuk Cctags 7.x-1.2 Oleg Kovalchuk Cctags 7.x-1.1 Oleg Kovalchuk Cctags 7.x-1.0 Oleg Kovalchuk Cctags 6.X-1.X Dev Oleg Kovalchuk Cctags 6.x-1.7 Oleg Kovalchuk Cctags 6.x-1.6 Oleg Kovalchuk Cctags 6.x-1.5 Oleg Kovalchuk Cctags 6.x-1.4 Oleg Kovalchuk Cctags 6.x-1.3 Oleg Kovalchuk Cctags 6.X-1.2 Oleg Kovalchuk Cctags 6.x-1.1 Oleg Kovalchuk Cctags 6.X-1.0 |
| Not Vulnerable: | |
Discussion
Cctags CVE-2012-2310 Cross-Site Scripting Vulnerability
Cctags is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.
Cctags is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.
Exploit / POC
Cctags CVE-2012-2310 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.