CVE-2010-2125

Published: Jun 1, 2010Modified: Apr 29, 2026

2.1

Vector

AV:N/AC:H/Au:S/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the (1) srs, (2) title, or (3) alt image attribute.

Affected (25)

Products: Systemseed: Rotor

Systemseed

1 product

Rotor

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Systemseed Rotor	Version 5.x-1.0
Systemseed Rotor	Version 5.x-1.1
Systemseed Rotor	Version 5.x-1.2
Systemseed Rotor	Version 5.x-1.3
Systemseed Rotor	Version 5.x-1.4
Systemseed Rotor	Version 5.x-1.5
Systemseed Rotor	Version 5.x-1.6
Systemseed Rotor	Version 5.x-1.7
Systemseed Rotor	Version 5.x-1.x dev

Configuration B

16 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Systemseed Rotor	Version 6.x-1.0
Systemseed Rotor	Version 6.x-1.1
Systemseed Rotor	Version 6.x-1.2
Systemseed Rotor	Version 6.x-1.3
Systemseed Rotor	Version 6.x-1.4
Systemseed Rotor	Version 6.x-1.x dev
Systemseed Rotor	Version 6.x-2.0
Systemseed Rotor	Version 6.x-2.0 beta1
Systemseed Rotor	Version 6.x-2.0 beta2
Systemseed Rotor	Version 6.x-2.0 beta3
Systemseed Rotor	Version 6.x-2.0 rc1
Systemseed Rotor	Version 6.x-2.1
Systemseed Rotor	Version 6.x-2.2
Systemseed Rotor	Version 6.x-2.3
Systemseed Rotor	Version 6.x-2.4
Systemseed Rotor	Version 6.x-2.x dev