CVE-2010-1584
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-1584
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Administer Blocks privileges, to inject arbitrary web script or HTML via a block description.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Drupal Context模块跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Drupal是很著名的开源内容管理平台，仿照了blog程序模式，但比普通的blog更灵活，可以做各种网站的内容管理平台。 Drupal的Context模块存在跨站脚本攻击(XSS)漏洞，拥有Administer Blocks权限的远程认证用户可通过块描述注入任意web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-1584
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-1584
请登录查看更多情报信息。
- http://drupal.org/node/794718x_refsource_CONFIRM
- http://drupal.org/cvs?commit=365210x_refsource_CONFIRM
- http://drupal.org/node/795118x_refsource_CONFIRM
- http://www.theregister.co.uk/2010/05/10/drupal_security_bug/x_refsource_MISC
- http://www.madirish.net/?article=457x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2010-1584
Same Patch Batch · n/a · 2010-05-18 · 20 CVEs total
| CVE-2010-1944 | openMairie openCimetiere 'path_om' 参数多个远程文件包含漏洞 | |
| CVE-2010-0404 | phpGroupWare 多个SQL注入漏洞 | |
| CVE-2010-0403 | phpGroupWare 'app' 参数本地文件包含漏洞 | |
| CVE-2010-1943 | NEC CapsSuite Small Edition PatchMeister 远程拒绝服务漏洞 | |
| CVE-2010-1942 | Fujitsu Interstage Application Server Servlet 组件安全漏洞 | |
| CVE-2010-1941 | Nec WebSAM DeploymentManager拒绝服务漏洞 | |
| CVE-2010-1948 | openMairie Openfoncier 'scr/soustab.php'目录遍历漏洞 | |
| CVE-2010-1947 | openMairie openRegistreCIL 远程文件包含漏洞 | |
| CVE-2010-1946 | openMairie openRegistreCIL 远程文件包含漏洞 | |
| CVE-2010-1945 | openMairie Openfoncier多个PHP远程文件包含漏洞 | |
| CVE-2010-1949 | Emultisoft Online News Paper Manager SQL注入漏洞 | |
| CVE-2010-1957 | Thefactory Love Factory目录遍历漏洞 | |
| CVE-2010-1956 | Thefactory Gadget Factory 'controller'参数本地文件包含漏洞 | |
| CVE-2010-1955 | Thefactory Deluxe Blog Factory 'controller'参数本地文件包含漏洞 | |
| CVE-2010-1954 | Joomlacomponent.Inetlanka iNetLanka Multiple root 'controller'参数本地文件包含漏洞 | |
| CVE-2010-1953 | Joomlacomponent.Inetlanka iNetLanka Multiple Map 'controller'参数本地文件包含漏洞 | |
| CVE-2010-1952 | Cmstactics BeeHeard Lite目录遍历漏洞 | |
| CVE-2010-1951 | 60cycleCMS多个目录遍历漏洞 | |
| CVE-2010-1950 | Emultisoft Online News Paper Manager SQL注入漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2010-1584
No comments yet