PT-2009-3873 · Drupal · Drupal Print Module

Publicado 2009-04-20 · Atualizado 2009-04-21 · CVE-2009-1343

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Drupal Print module versions 5.x before 5.x-4.5 Drupal Print module versions 6.x before 6.x-1.5

Description A cross-site scripting issue exists in the Print module for Drupal, allowing remote attackers to inject arbitrary web script or HTML via content titles.

Recommendations For Drupal Print module version 5.x, update to version 5.x-4.5 or later. For Drupal Print module version 6.x, update to version 6.x-1.5 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-1343

Produtos afetados

Drupal Print Module

Referências · 6

• http://osvdb.org/53704 · Nota
• http://vupen.com/english/advisories/2009/1060 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1343 · Nota de Segurança
• http://secunia.com/advisories/34738 · Aviso do Fabricante
• http://drupal.org/node/434748 · Correção
• http://securityfocus.com/bid/34545 · Correção