Cross-Site Scripting Vulnerability in Ticketyboo News Ticker for Drupal
CVE-2012-2059

Currently unrated

Key Information:

Vendor: Steve Lockwood
Status: Ticketyboo News Ticker
Vendor: CVE Published:; 17 September 2012

🔔 Create Steve Lockwood Vulnerability Alert

What is CVE-2012-2059?

A cross-site scripting (XSS) flaw exists within the Ticketyboo News Ticker module for Drupal, which enables remote attackers to inject arbitrary web scripts or HTML through unspecified input vectors. This vulnerability can be exploited to execute malicious scripts in the context of affected users, potentially leading to unauthorized access, data theft, or other harmful consequences.

References

http://drupal.org/node/1482126

x_refsource_MISC

https://exchange.xforce.ibmcloud.com/vulnerabilities/74056

vdb-entryx_refsource_XF

http://www.securityfocus.com/bid/52502

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 17, 2012
Vulnerability Reserved
Apr 4, 2012

JSON