CVE-2010-1536
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal AddThis Button模块存在跨站脚本攻击(XSS)漏洞。远程认证用户可通过未明向量，利用adminster addthis权限注入任意网页脚本或HTML。
Possible ATT&CK Techniques 1 AI
T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2010-1536
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x before 6.x-2.9 for Drupal allows remote authenticated users, with administer addthis privileges, to inject arbitrary web script or HTML via unspecified vectors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Drupal AddThis Button模块跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal AddThis Button模块存在跨站脚本攻击(XSS)漏洞。远程认证用户可通过未明向量，利用adminster addthis权限注入任意网页脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2010-1536
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-1536
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-1536 (2)
Other References for CVE-2010-1536 (3)
-
http://drupal.org/node/731568 x_refsource_CONFIRM
-
http://drupal.org/node/731576 x_refsource_CONFIRM
-
http://drupal.org/node/731578 x_refsource_CONFIRM
Same Patch Batch · n/a · 2010-04-26 · 17 CVEs total
| CVE-2010-1537 | PhpCDB'lang_global'多个目录遍历漏洞 | |
| CVE-2010-1538 | Bluestrikeweb phpRAINCHECK 'id' 参数SQL注入漏洞 | |
| CVE-2010-1539 | Drupal Workflow 模块跨站脚本攻击漏洞 | |
| CVE-2010-1540 | Myblog 'com_myblog'组件'task'参数本地文件包含漏洞 | |
| CVE-2010-1541 | Dragonfrugal DFD Cart多个跨站脚本攻击漏洞 | |
| CVE-2010-1542 | Dragonfrugal DFD Cart 'admin/configure.php'跨站请求伪造漏洞 | |
| CVE-2010-1543 | eTracker模块URI跨站脚本攻击漏洞 | |
| CVE-2010-1544 | RCA DCM425调制解调器micro_httpd远程拒绝服务漏洞 | |
| CVE-2010-1528 | Uiga Proxy'template.php'PHP远程文件包含漏洞 | |
| CVE-2010-1529 | Freestyle FAQ Lite组件'faqid'参数SQL注入漏洞 | |
| CVE-2010-1530 | Reyero Internationalization模块多个跨站脚本攻击漏洞 | |
| CVE-2010-1531 | Redcomponent redSHOP组件目录遍历漏洞 | |
| CVE-2010-1532 | givesight PowerMail Pro组件目录遍历漏洞 | |
| CVE-2010-1533 | Joomla! TweetLA (com_tweetla)组件目录遍历漏洞 | |
| CVE-2010-1534 | Joomla! Shoutbox Pro (com_shoutbox)组件目录遍历漏洞 | |
| CVE-2010-1535 | Joomla! TRAVELbook (com_travelbook) 组件目录遍历漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2010-1536
No comments yet