CVE-2012-4469

Published: Nov 30, 2012Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.2 for Drupal, when "Log failed hashcash" is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid token, which is not properly handled when administrators use the Database logging module.

Affected (8)

Products: Simon Rycroft: Hashcash

Simon Rycroft

1 product

Hashcash

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Simon Rycroft Hashcash	Version 6.x-2.0
Simon Rycroft Hashcash	Version 6.x-2.1
Simon Rycroft Hashcash	Version 6.x-2.2
Simon Rycroft Hashcash	Version 6.x-2.3
Simon Rycroft Hashcash	Version 6.x-2.4
Simon Rycroft Hashcash	Version 6.x-2.5
Simon Rycroft Hashcash	Version 7.x-2.0
Simon Rycroft Hashcash	Version 7.x-2.1