CVE-2009-4990
Published Aug 25, 2010
Last updated 14 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in the Webform report module 5.x and 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a submission.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:5.x-1.x:dev:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA04CD08-ECBE-4B3C-99D5-7BBDEC735BC9"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:5.x-2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EB2EAC1-CADD-4A31-83AF-A629EC0F2DAC"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:5.x-2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "135DFD02-18D3-4BC3-9404-F5BFB94F9910"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:5.x-2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF72861D-5EB4-412B-9442-B4D6587BE5EC"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:5.x-2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA4328DD-898A-40DF-ABC1-4CBC042DB5AD"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:6.x-1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB414F54-69D4-4E55-9148-C1FE8C35591C"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:6.x-1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70710AF8-BBAC-405A-A156-8C18260AE0DD"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:6.x-1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "769E4AC3-1008-4E77-B9BD-54C4B22A0085"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:6.x-1.x-dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51B8963E-C011-446A-8941-BA5395EB29FC"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:6.x-2.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D62B3FB6-0585-41A0-B90A-44CB00FB68AB"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:6.x-2.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0CCAD53-9CAC-44AF-A9EF-C0F2754F94B7"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:6.x-2.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "396B808E-D090-4BA0-B2A7-C9846460C38B"
},
{
"criteria": "cpe:2.3:a:jrbcs:webform_report:6.x-2.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "757698B8-C131-402B-89B7-78D88AE62592"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]