CVE-2010-2048
25.05.2010, 18:30
Multiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before 6.x-4.9 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| menhir | heartbeat | 6.x-2.3:x |
| menhir | heartbeat | 6.x-2.3:x |
| menhir | heartbeat | 6.x-2.3:x |
| menhir | heartbeat | 6.x-3.2:x |
| menhir | heartbeat | 6.x-3.3:x |
| menhir | heartbeat | 6.x-3.x:x |
| menhir | heartbeat | 6.x-4.0:x |
| menhir | heartbeat | 6.x-4.1:x |
| menhir | heartbeat | 6.x-4.2:x |
| menhir | heartbeat | 6.x-4.3:x |
| menhir | heartbeat | 6.x-4.3:x |
| menhir | heartbeat | 6.x-4.3:x |
| menhir | heartbeat | 6.x-4.3:x |
| menhir | heartbeat | 6.x-4.4:x |
| menhir | heartbeat | 6.x-4.5:x |
| menhir | heartbeat | 6.x-4.6:x |
| menhir | heartbeat | 6.x-4.7:x |
| menhir | heartbeat | 6.x-4.8:x |
| menhir | heartbeat | 6.x-4.x:x |
𝑥
= Vulnerable software versions
References