Back to Database
Status published
Medium
CVE-2012-2084
Cross-site scripting (XSS) vulnerability in the Printer, email and PDF...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Printer, email and PDF versions module 6.x-1.x before 6.x-1.15 and 7.x-1.x before 7.x-1.0 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably the PATH_INFO.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-2084
Credits & Attribution
No credits recorded in the NVD database.
References
- http://drupalcode.org/project/print.git/commit/30480e0
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74611
- http://drupalcode.org/project/print.git/commit/6771c3f
- http://drupal.org/node/1515722
- http://drupal.org/node/1515060
- http://www.securityfocus.com/bid/52896
- http://www.openwall.com/lists/oss-security/2012/04/07/1
- http://drupal.org/node/1515076
- http://secunia.com/advisories/48625
More from joao ventura
View All →Affected Vendor
joao ventura
View all reports →Affected Software
print
Vulnerable Versions:
6.x-1.0, 6.x-1.1, 6.x-1.2, 6.x-1.3, 6.x-1.4, 6.x-1.5, 6.x-1.6, 6.x-1.7, 6.x-1.8, 6.x-1.9, 6.x-1.10, 6.x-1.11, 6.x-1.12, 6.x-1.13, 6.x-1.14, 6.x-1.x, 7.x-10
Timeline
Official Publish:
November 22nd, 2012
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.