2.1
CVE-2013-4380
- EPSS 0.94%
- Veröffentlicht 20.05.2014 14:55:04
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginCross-site scripting (XSS) vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer mediafront" permission to inject arbitrary web script or HTML via the preset settings.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mediafront ≫ Mediafront Version 6.x-1.0
Mediafront ≫ Mediafront Version 6.x-1.0 Update beta1
Mediafront ≫ Mediafront Version 6.x-1.0 Update beta2
Mediafront ≫ Mediafront Version 6.x-1.0 Update beta4
Mediafront ≫ Mediafront Version 6.x-1.0 Update beta5
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc1
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc2
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc3
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc4
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc5
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc6
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc7
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc8
Mediafront ≫ Mediafront Version 6.x-1.0 Update rc9
Mediafront ≫ Mediafront Version 6.x-1.1
Mediafront ≫ Mediafront Version 6.x-1.2
Mediafront ≫ Mediafront Version 6.x-1.3
Mediafront ≫ Mediafront Version 6.x-1.5
Mediafront ≫ Mediafront Version 6.x-1.x Update dev
Mediafront ≫ Mediafront Version 7.x-2.0 Update -
Mediafront ≫ Mediafront Version 7.x-2.0 Update alpha1
Mediafront ≫ Mediafront Version 7.x-2.0 Update alpha2
Mediafront ≫ Mediafront Version 7.x-2.0 Update alpha3
Mediafront ≫ Mediafront Version 7.x-2.0 Update alpha4
Mediafront ≫ Mediafront Version 7.x-2.0 Update alpha5
Mediafront ≫ Mediafront Version 7.x-2.0 Update beta1
Mediafront ≫ Mediafront Version 7.x-2.0 Update beta2
Mediafront ≫ Mediafront Version 7.x-2.0 Update beta4
Mediafront ≫ Mediafront Version 7.x-2.0 Update beta5
Mediafront ≫ Mediafront Version 7.x-2.0 Update rc1
Mediafront ≫ Mediafront Version 7.x-2.0 Update rc2
Mediafront ≫ Mediafront Version 7.x-2.0 Update rc3
Mediafront ≫ Mediafront Version 7.x-2.0 Update rc4
Mediafront ≫ Mediafront Version 7.x-2.0 Update rc5
Mediafront ≫ Mediafront Version 7.x-2.0 Update rc6
Mediafront ≫ Mediafront Version 7.x-2.0 Update rc7
Mediafront ≫ Mediafront Version 7.x-2.0 Update rc8
Mediafront ≫ Mediafront Version 7.x-2.x Update dev
Mediafront ≫ Mediafront Version 7.x-1.0 Update -
Mediafront ≫ Mediafront Version 7.x-1.0 Update beta1
Mediafront ≫ Mediafront Version 7.x-1.0 Update beta2
Mediafront ≫ Mediafront Version 7.x-1.0 Update beta3
Mediafront ≫ Mediafront Version 7.x-1.0 Update rc1
Mediafront ≫ Mediafront Version 7.x-1.0 Update rc2
Mediafront ≫ Mediafront Version 7.x-1.0 Update rc3
Mediafront ≫ Mediafront Version 7.x-1.0 Update rc4
Mediafront ≫ Mediafront Version 7.x-1.0 Update rc5
Mediafront ≫ Mediafront Version 7.x-1.0 Update rc6
Mediafront ≫ Mediafront Version 7.x-1.0 Update rc7
Mediafront ≫ Mediafront Version 7.x-1.0 Update rc8
Mediafront ≫ Mediafront Version 7.x-1.1
Mediafront ≫ Mediafront Version 7.x-1.2
Mediafront ≫ Mediafront Version 7.x-1.3
Mediafront ≫ Mediafront Version 7.x-1.4
Mediafront ≫ Mediafront Version 7.x-1.5
Mediafront ≫ Mediafront Version 7.x-1.x Update dev
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.94% | 0.563 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 2.1 | 3.9 | 2.9 |
AV:N/AC:H/Au:S/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
http://www.openwall.com/lists/oss-security/2013/09/27/6
https://drupal.org/node/2086187
https://drupal.org/node/2086189
https://drupal.org/node/2086191
https://drupal.org/node/2087051