Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2013-1781

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Drupal Professional theme是一款Drupal的主题插件。 Drupal中的Professional主题7.x-1.4之前版本中存在跨站脚本漏洞，该漏洞源于程序没有验证用户提供的输入。攻击者利用该漏洞在受影响浏览器上下文中运行恶意的HTML和脚本代码，潜在的允许攻击者窃取基于cookie认证证书或控制站点呈现给用户的方式，也可能存在其他攻击。

AI Predicted 6.1 Difficulty: Easy EPSS 0.94% · P58
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2013-1781

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Drupal Professional主题跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Drupal Professional theme是一款Drupal的主题插件。 Drupal中的Professional主题7.x-1.4之前版本中存在跨站脚本漏洞，该漏洞源于程序没有验证用户提供的输入。攻击者利用该漏洞在受影响浏览器上下文中运行恶意的HTML和脚本代码，潜在的允许攻击者窃取基于cookie认证证书或控制站点呈现给用户的方式，也可能存在其他攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2013-1781

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-1781

请登录查看更多情报信息。

Mailing List Discussions for CVE-2013-1781 (1)

Other References for CVE-2013-1781 (4)

Same Patch Batch · n/a · 2013-03-27 · 37 CVEs total

CVE-2013-2715 Drupal Search API模块跨站脚本漏洞
CVE-2013-1780 Drupal Best Responsive主题跨站脚本漏洞
CVE-2013-1782 Drupal Responsive Blog主题跨站脚本漏洞
CVE-2013-1783 Drupal Business Theme Slide Gallery 跨站脚本漏洞
CVE-2013-1784 Drupal Clean Theme Slide Gallery 跨站脚本漏洞
CVE-2013-1785 Drupal Premium Responsive Theme Slide Gallery 跨站脚本漏洞
CVE-2013-1786 Drupal Company Theme Slide Gallery 跨站脚本漏洞
CVE-2013-1787 Drupal Simple Corporate 跨站脚本漏洞
CVE-2013-1859 Drupal Node Parameter Control模块访问绕过漏洞
CVE-2013-1779 Drupal Fresh主题跨站脚本漏洞
CVE-2013-0718 Android平台Simeji应用程序安全漏洞
CVE-2013-0719 Android平台ArtIME Japanese Input应用程序安全漏洞
CVE-2013-0720 Android平台COBIME应用程序安全漏洞
CVE-2013-2300 Android平台FlickWnn应用程序安全漏洞
CVE-2013-0486 IBM Lotus Domino 拒绝服务漏洞
CVE-2013-0487 IBM Lotus Domino 认证绕过漏洞
CVE-2013-0488 IBM Lotus Domino ‘webadmin.nsf’跨站脚本漏洞
CVE-2013-0489 IBM Lotus Domino 跨站请求伪造漏洞
CVE-2013-0318 Drupal Banckle Chat模块访问绕过漏洞
CVE-2013-0181 Drupal Search API模块跨站脚本漏洞

Showing top 20 of 37 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2013-1781

No comments yet

Leave a comment