CVE-2012-1657
Published Sep 18, 2012
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the class name.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:N/AC:H/Au:S/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:5.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E6FC3B5-64D3-482E-B28F-75D8A73D17EC"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:5.x-1.0:rc:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "554F8AE2-1404-44BA-971F-B140DE95F836"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:5.x-1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBA36D57-9BF9-48DE-BED2-69F19455111D"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:5.x-1.x:dev:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93B17A40-C151-4DA2-8ED0-BFFD80137102"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:6.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C3EAC09-AD61-4BEC-8AA6-0190BCE08C19"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:6.x-1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8FDD5A5-5957-4373-9900-BA5FAF71EEC9"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:6.x-1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82DB54D3-EC4C-4D03-AEC7-4C6308CEFC9D"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:6.x-1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C96BABD-0873-4C62-9AC7-B01355FBB76D"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:6.x-1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A56CF89B-8718-4970-ABDF-0E7E59A298B7"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:6.x-1.4:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "865810AE-640A-4EAE-91FD-27D8C517C26C"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:6.x-1.x:dev:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE0149B5-DAF8-4F1A-8B64-9879C3978B1C"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:6.x-2.x:dev:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A802E1B-0DE0-4BA6-A91A-75AC29F49F0D"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:7.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24F35555-BC92-4475-AA05-7D6E06B6614B"
},
{
"criteria": "cpe:2.3:a:fourkitchens:block_class:7.x-1.x:dev:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1715D2CB-6246-44FD-84B7-D84D1AD07D2B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]