[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2010-2158":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":73,"references":76,"score":79,"epss_score":80,"epss_percentile":81,"is_kev":82,"cisa_kev_date_added":83,"cisa_kev_due_date":83,"cisa_ssvc":84,"attack_mappings":90,"exploits":97},148086,"CVE-2010-2158","EUVD-2010-2174","Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary web script or HTML via the (1) fullname, (2) phone, or (3) im parameter in a stormperson action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","2010-06-07T17:12:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":18},"2.0",2.1,"NETWORK","AV:N\u002FAC:H\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL","HIGH","NONE",true,[21],"CWE-79",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72],"cpe:2.3:a:speedtech:storm:5.x-1.5:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.23:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.7:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.8:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.28:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.x:dev:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.14:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.4:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.13:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.31:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.14:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.x:dev:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.5:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.18:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.20:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.7:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.9:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.12:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.0:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.9:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.4:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.1:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.17:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.13:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.6:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.19:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.26:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.15:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.27:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.30:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.2:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.29:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.21:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.2:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.10:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.32:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.3:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.11:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.3:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.1:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.16:*:*:*:*:*:*:*","cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.12:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.25:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.11:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.22:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.8:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:6.x-1.24:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.6:*:*:*:*:*:*:*","cpe:2.3:a:speedtech:storm:5.x-1.10:*:*:*:*:*:*:*",[74,75],"Speedtech Storm","Drupal Drupal",[77,78],"http:\u002F\u002Fdrupal.org\u002Fnode\u002F803770","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F39732",0.31,0.00662,0.51101,false,null,{"timestamp":83,"automatable":85,"tech_impact":86,"exploitation":87,"cisa_decision":88,"cisa_remediation_timeline":89},"no","partial","none",{},"FSU",[91],{"name":92,"source":93,"tactics":94,"technique_id":96},"Exploit Public-Facing Application","attack_vector",[95],"initial-access","T1190",[]]