Unrated severityNVD Advisory· Published Nov 7, 2019· Updated Aug 7, 2024
CVE-2010-2250
CVE-2010-2250
Description
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- drupal6/drupal6v5Range: 6.x before version 6.16
Patches
Vulnerability mechanics
References
4- www.openwall.com/lists/oss-security/2014/02/12/8mitremailing-listx_refsource_MLIST
- security-tracker.debian.org/tracker/CVE-2010-2250mitrex_refsource_MISC
- www.drupal.org/node/731710mitrex_refsource_CONFIRMx_refsource_MISC
- www.openwall.com/lists/oss-security/2010/06/28/8mitremailing-listx_refsource_MLIST
News mentions
0No linked articles in our index yet.