Description (CNA)
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| drupal6 / drupal6 | affected 6.x before version 6.16 |
CWE
No CWE identifiers supplied.
References
- http://www.openwall.com/lists/oss-security/2014/02/12/8
- https://security-tracker.debian.org/tracker/CVE-2010-2250
- https://www.drupal.org/node/731710
- https://www.openwall.com/lists/oss-security/2010/06/28/8
- https://www.drupal.org/node/731710
ADP enrichment
No English description supplied.