SecuritySpace - CVE-2010-1303

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-1303

Description: Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-1303
http://www.osvdb.org/63425
http://secunia.com/advisories/39220
XForce ISS Database: taxonomy-names-xss(57445)
https://exchange.xforce.ibmcloud.com/vulnerabilities/57445

CVE ID:	CVE-2010-1303
Description:	Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1303 http://www.osvdb.org/63425 http://secunia.com/advisories/39220 XForce ISS Database: taxonomy-names-xss(57445) https://exchange.xforce.ibmcloud.com/vulnerabilities/57445