CVE-2007-3818 | BDVDB-2026-25339 Detail

Description#

Cross-site scripting (XSS) vulnerability in the LoginToboggan module 5.x-1.x-dev before 20070712 for Drupal allows remote authenticated users with "administer blocks" permission to inject arbitrary JavaScript and gain privileges via "the message displayed above the default user login block."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://drupal.org/node/158921
http://osvdb.org/37010

Exploit#

No public exploit known

History#

Version 12007-07-17Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.