Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2008-6972
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-13 Aug, 2009 | 16:30
Updated At-17 Aug, 2017 | 01:29

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via the (1) "field label," (2) "help text," or (3) "allowed values" settings.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.03.5LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N
CPE Matches
The Drupal Association
drupal
>>drupal>>*
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
karen_stevenson
karen_stevenson
>>cck>>5.x-1.0-beta
cpe:2.3:a:karen_stevenson:cck:5.x-1.0-beta:*:*:*:*:*:*:*
karen_stevenson
karen_stevenson
>>cck>>5.x-1.1
cpe:2.3:a:karen_stevenson:cck:5.x-1.1:*:*:*:*:*:*:*
karen_stevenson
karen_stevenson
>>cck>>5.x-1.2
cpe:2.3:a:karen_stevenson:cck:5.x-1.2:*:*:*:*:*:*:*
karen_stevenson
karen_stevenson
>>cck>>5.x-1.3
cpe:2.3:a:karen_stevenson:cck:5.x-1.3:*:*:*:*:*:*:*
karen_stevenson
karen_stevenson
>>cck>>5.x-1.7
cpe:2.3:a:karen_stevenson:cck:5.x-1.7:*:*:*:*:*:*:*
karen_stevenson
karen_stevenson
>>cck>>5.x-1.x-dev
cpe:2.3:a:karen_stevenson:cck:5.x-1.x-dev:*:*:*:*:*:*:*
yves_chedemois
yves_chedemois
>>cck>>5.x-1.4
cpe:2.3:a:yves_chedemois:cck:5.x-1.4:*:*:*:*:*:*:*
yves_chedemois
yves_chedemois
>>cck>>5.x-1.5
cpe:2.3:a:yves_chedemois:cck:5.x-1.5:*:*:*:*:*:*:*
yves_chedemois
yves_chedemois
>>cck>>5.x-1.6
cpe:2.3:a:yves_chedemois:cck:5.x-1.6:*:*:*:*:*:*:*
yves_chedemois
yves_chedemois
>>cck>>5.x-1.6-1
cpe:2.3:a:yves_chedemois:cck:5.x-1.6-1:*:*:*:*:*:*:*
yves_chedemois
yves_chedemois
>>cck>>5.x-1.8
cpe:2.3:a:yves_chedemois:cck:5.x-1.8:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://drupal.org/node/304093cve@mitre.org
Patch
Vendor Advisory
http://osvdb.org/47929cve@mitre.org
N/A
http://secunia.com/advisories/31757cve@mitre.org
Vendor Advisory
http://www.securityfocus.com/bid/31027cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/44915cve@mitre.org
N/A
Change History
0Changes found
Details not found