CVEvulnerability
CVE-2012-2717
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL field or (2) Desktop URL field to the General configuration page, or the (3) message to the Mobile Tools block message options.
Affected configurations
• mathew winstone mobile tools 6.x-2.0
• mathew winstone mobile tools 6.x-2.1
• mathew winstone mobile tools 6.x-2.2
• mathew winstone mobile tools 6.x-2.x
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://drupal.org/node/1169008 Patch
- http://drupal.org/node/1608828 Patch, Vendor Advisory
- http://drupalcode.org/project/mobile_tools.git/commitdiff/614b0fc Exploit, Patch
- http://osvdb.org/82410 osvdb.org
- http://secunia.com/advisories/49318 Vendor Advisory
- http://www.madirish.net/content/drupal-mobile-tools-6x-23-xss www.madirish.net
- http://www.openwall.com/lists/oss-security/2012/06/14/3 www.openwall.com
- http://www.securityfocus.com/bid/53734 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76002 exchange.xforce.ibmcloud.com
- http://drupal.org/node/1169008 Patch
- http://drupal.org/node/1608828 Patch, Vendor Advisory
- http://drupalcode.org/project/mobile_tools.git/commitdiff/614b0fc Exploit, Patch
- http://osvdb.org/82410 osvdb.org
- http://secunia.com/advisories/49318 Vendor Advisory
- http://www.madirish.net/content/drupal-mobile-tools-6x-23-xss www.madirish.net
- http://www.openwall.com/lists/oss-security/2012/06/14/3 www.openwall.com
- http://www.securityfocus.com/bid/53734 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76002 exchange.xforce.ibmcloud.com