Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2013-2036

Cross-site scripting (XSS) vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files."

  • Published: Jun 24, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-2036
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
yoran_brault / filebrowser 6.x-2.0-rc1 6.x-2.0-rc1.x
yoran_brault / filebrowser 6.x-2.0-rc2 6.x-2.0-rc2.x
yoran_brault / filebrowser 6.x-2.0-rc3 6.x-2.0-rc3.x
yoran_brault / filebrowser 6.x-2.0-rc4 6.x-2.0-rc4.x
yoran_brault / filebrowser 6.x-2.0-rc5 6.x-2.0-rc5.x
yoran_brault / filebrowser 6.x-2.0-rc6 6.x-2.0-rc6.x
yoran_brault / filebrowser 6.x-2.0-rc7 6.x-2.0-rc7.x
yoran_brault / filebrowser 6.x-2.0-rc8 6.x-2.0-rc8.x
yoran_brault / filebrowser 6.x-2.0-rc9 6.x-2.0-rc9.x
yoran_brault / filebrowser 6.x-2.0-rc10 6.x-2.0-rc10.x
yoran_brault / filebrowser 6.x-2.0-rc11 6.x-2.0-rc11.x
yoran_brault / filebrowser 6.x-2.0-rc12 6.x-2.0-rc12.x
yoran_brault / filebrowser 6.x-2.0-rc13 6.x-2.0-rc13.x
yoran_brault / filebrowser 6.x-2.1 6.x-2.1.x