CVE-2013-0321
Published Mar 27, 2013
Last updated 12 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field.
- Source
- secalert@redhat.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A3AD3A4-224C-4C13-B7B9-37A291134607"
},
{
"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CE18463-3D75-4BF0-AFEA-40D26D1FCEA3"
},
{
"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.x:dev:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F3503BA-283A-4D33-9F1A-A0A615D5C4D5"
},
{
"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F45D3CB-30C5-4554-8594-5DE7DBE6492E"
},
{
"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A33F7740-9855-4CAF-A399-A61A0F0037DA"
},
{
"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07206969-A4BB-4439-A152-7240E71C606A"
},
{
"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68707494-6B99-4E91-9773-6E0F66FEC88E"
},
{
"criteria": "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.x:dev:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E486FB1A-0A82-4824-BA3E-722AC8C06D74"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]