CVE-2010-2250

NameCVE-2010-2250
DescriptionDrupal 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-2016-1
NVD severitymedium
Debian Bugs592716

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
drupal6source(unstable)6.18-1592716
drupal6sourcelenny6.6-3lenny5DSA-2016-1

Search for package or bug name: Reporting problems