CVEvulnerability
CVE-2012-2706
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration.
Affected configurations
• peter pokrivcak post affiliate pro
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://drupal.org/node/1585648 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/06/14/3 www.openwall.com
- http://www.securityfocus.com/bid/53589 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75716 exchange.xforce.ibmcloud.com
- http://drupal.org/node/1585648 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/06/14/3 www.openwall.com
- http://www.securityfocus.com/bid/53589 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75716 exchange.xforce.ibmcloud.com