CVE-2012-2059

https://notcve.org/view.php?id=CVE-2012-2059

Cross-site scripting (XSS) vulnerability in the ticketyboo News Ticker module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el módulo newsticker ticketyboo para Drupal permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados. • http://drupal.org/node/1482126 http://www.openwall.com/lists/oss-security/2012/04/07/1 http://www.securityfocus.com/bid/52502 https://exchange.xforce.ibmcloud.com/vulnerabilities/74056 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •