CVE-2012-1646
Published Sep 25, 2012
Last updated 7 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via the (1) title parameter in faq.admin.inc or (2) detailed_question parameter in faq.module.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C7621BB-79CE-4E0D-A8C5-0850AABA7F2C"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F802F283-F156-4922-B8C2-724460762E69"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35230211-70A5-4326-AD10-C86E0D5C8433"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE97703C-678B-405C-A59F-46D7D3865CAC"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE789677-85C7-4BA5-B2AF-76A0313501B1"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD193B07-1E1E-46DF-BDEC-2D4E2380125E"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE9F202E-9375-4B5D-8095-8CBA5081116F"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "935EBD92-BA47-42F1-8E58-22CAEDDD03A9"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "889BEDC0-2220-446E-91F9-35302415BC9A"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4496F90-543E-48DB-84BE-E5F1C47C716A"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A048AE3E-640D-4DA8-983A-2F06734BB1D2"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43DCB8F6-4EFD-4FA2-9972-0F7A1916221C"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B769C343-1E2A-46E8-A288-925036E50D57"
},
{
"criteria": "cpe:2.3:a:drupal:faq:6.x-1.x:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA53F38F-1512-4FCA-BDA4-9B2E640995A9"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:faq:7x-1.x-rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10F19FAD-1180-442F-8343-6C58A6D05D0B"
}
],
"operator": "OR"
}
]
}
]