CVE-2012-5553

Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the (1) Menu Title (2) Link Title, (3) Path Query, (4) Anchor, or (5) vocabulary names.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc3:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc4:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc5:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc6:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc7:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.1:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.2:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.3:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.4:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.5:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.6:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.7:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.8:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.9:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.10:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.11:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.12:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.13:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.14:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.15:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.16:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.17:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.18:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.19:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.20:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.21:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.22:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.23:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.24:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.25:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.26:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.27:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.28:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.29:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.30:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.31:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.32:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.33:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.34:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.35:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.36:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.37:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.38:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.39:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.40:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.41:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.42:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.43:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.x:dev:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.0:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.1:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.2:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.3:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.4:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.5:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.6:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.7:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.8:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.9:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.10:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.11:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.12:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.13:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.14:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.15:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.16:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.17:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.18:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.19:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.20:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.21:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.22:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.23:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.24:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.25:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.26:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.27:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.28:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.29:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.30:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.31:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.32:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.33:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.34:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.35:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.36:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.37:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.38:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.39:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.40:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.41:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.42:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.43:*:*:*:*:*:*:*
cpe:2.3:a:daniel_honrade:om_maximenu:7.x-1.x:dev:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

History

21 Nov 2024, 01:44

Type Values Removed Values Added
References () http://drupal.org/node/1834046 - Patch () http://drupal.org/node/1834046 - Patch
References () http://drupal.org/node/1834048 - Patch () http://drupal.org/node/1834048 - Patch
References () http://drupal.org/node/1834866 - Patch, Vendor Advisory () http://drupal.org/node/1834866 - Patch, Vendor Advisory
References () http://www.madirish.net/551 - () http://www.madirish.net/551 -
References () http://www.openwall.com/lists/oss-security/2012/11/20/4 - () http://www.openwall.com/lists/oss-security/2012/11/20/4 -

Information

Published : 2012-12-03 21:55

Updated : 2024-11-21 01:44


NVD link : CVE-2012-5553

Mitre link : CVE-2012-5553

CVE.ORG link : CVE-2012-5553


JSON object : View

Products Affected

daniel_honrade

  • om_maximenu

drupal

  • drupal
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')