CVE-2013-1971: XSS
First published: Tue Jun 25 2013(Updated: )
Cross-site scripting (XSS) vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jordan De Laune Mp3 Player | <=6.x-1.1 | |
| Jordan De Laune Mp3 Player | =6.x-1.0 | |
| Jordan De Laune Mp3 Player | =6.x-1.0-beta1 | |
| Drupal Drupal |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/jordan de laune
- canonical/jordan de laune mp3 player
- version/jordan de laune mp3 player/6.x-1.1
- version/jordan de laune mp3 player/6.x-1.0
- version/jordan de laune mp3 player/6.x-1.0-beta1
- vendor/drupal
- canonical/drupal drupal