medium6.1
CVE-2010-2250
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-s…
Impact
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | from 5.0 before 5.22 from 6.0 before 6.16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2014/02/12/8
- https://security-tracker.debian.org/tracker/CVE-2010-2250
- https://www.drupal.org/node/731710
- https://www.drupal.org/node/731710
- https://www.drupal.org/node/731710
- https://www.drupal.org/node/731710
- https://www.openwall.com/lists/oss-security/2010/06/28/8
- http://www.openwall.com/lists/oss-security/2014/02/12/8
- https://security-tracker.debian.org/tracker/CVE-2010-2250
- https://www.drupal.org/node/731710
- https://www.drupal.org/node/731710
- https://www.drupal.org/node/731710
- https://www.drupal.org/node/731710
- https://www.openwall.com/lists/oss-security/2010/06/28/8