CVE-2010-1108

Cross-site scripting (XSS) vulnerability in the Control Panel module 5.x through 5.x-1.5 and 6.x through 6.x-1.2 for Drupal allows remote authenticated users, with "administer blocks" privileges, to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://drupal.org/node/686428Patch
• http://drupal.org/node/690718Patch, Vendor Advisory
• http://secunia.com/advisories/38280Vendor Advisory
• http://www.securityfocus.com/bid/37890
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55769
• http://drupal.org/node/686428Patch
• http://drupal.org/node/690718Patch, Vendor Advisory
• http://secunia.com/advisories/38280Vendor Advisory
• http://www.securityfocus.com/bid/37890
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55769

Published

Mar 25, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1102Integer overflow in OmniWeb allows remote attackers to bypas…
• CVE-2010-1103Integer overflow in Stainless allows remote attackers to byp…
• CVE-2010-1104Cross-site scripting (XSS) vulnerability in Zope 2.8.x befor…
• CVE-2010-1105Cross-site scripting (XSS) vulnerability in cgi/index.php in…
• CVE-2010-1106PHP remote file inclusion vulnerability in cgi/index.php in …
• CVE-2010-1107Cross-site scripting (XSS) vulnerability in the Recent Comme…
• CVE-2010-1109Multiple SQL injection vulnerabilities in index.php in phpMy…
• CVE-2010-1110Directory traversal vulnerability in index.php in phpMySport…
• CVE-2010-1111Multiple cross-site scripting (XSS) vulnerabilities in Jokes…
• CVE-2010-1112Cross-site scripting (XSS) vulnerability in cat.php in KloNe…
• CVE-2010-1113Cross-site scripting (XSS) vulnerability in the forum page i…
• CVE-2010-1114Multiple PHP remote file inclusion vulnerabilities in Web Se…