PT-2009-5923 · Drupal · Browscap

Greg Knaddison + 1 · Publicado 2009-10-09 · Atualizado 2017-08-17 · CVE-2009-3651

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Browscap versions prior to 5.x-1.1 Browscap versions prior to 6.x-1.1

Description A cross-site scripting (XSS) issue exists in the Monitor browsers' feature of the Browscap module for Drupal. This issue allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.

Recommendations For Browscap versions prior to 5.x-1.1, update to version 5.x-1.1 or later. For Browscap versions prior to 6.x-1.1, update to version 6.x-1.1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-3651

Produtos afetados

Browscap

Referências · 8

• http://securityfocus.com/bid/36557 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3651 · Nota de Segurança
• http://osvdb.org/58444 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53571 · Nota
• http://secunia.com/advisories/36912 · Aviso do Fabricante
• http://drupal.org/node/592264 · Aviso do Fabricante
• http://drupal.org/node/592272 · Aviso do Fabricante
• http://drupal.org/node/592262 · Aviso do Fabricante