Vulnerability CVE-2010-1530
Published: 2010-04-26   Modified: 2012-02-13

Description:
Multiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with translate interface or administer blocks privileges, to inject arbitrary web script or HTML via (1) strings used in block translation or (2) the untranslated input.

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

CVSS2 => (AV:N/AC:H/Au:S/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.1/10
2.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Remote
High
Single time
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Reyero -> I18N 

 References:
http://www.securityfocus.com/bid/39304
http://drupal.org/node/764998
http://drupal.org/node/764906
http://secunia.com/advisories/39361
http://osvdb.org/63589
Copyright 2024, cxsecurity.com

 

Back to Top