Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Barry Jaspan | Image Pager | 4.7 |
References
- http://drupal.org/node/119293
- http://osvdb.org/35151
- http://www.securityfocus.com/bid/22586
- http://www.vupen.com/english/advisories/2007/0636
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32539
- http://drupal.org/node/119293
- http://osvdb.org/35151
- http://www.securityfocus.com/bid/22586
- http://www.vupen.com/english/advisories/2007/0636
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32539
FAQ
What is CVE-2007-1028?
CVE-2007-1028 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Cross-site scripting (XSS) vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTM...
How severe is CVE-2007-1028?
CVE-2007-1028 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-1028?
Check the references section above for vendor advisories and patch information. Affected products include: Barry Jaspan Image Pager.