PT-2009-3873 · Drupal · Drupal Print Module

Published 2009-04-20 · Updated 2009-04-21 · CVE-2009-1343

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Drupal Print module versions 5.x before 5.x-4.5 Drupal Print module versions 6.x before 6.x-1.5

Description A cross-site scripting issue exists in the Print module for Drupal, allowing remote attackers to inject arbitrary web script or HTML via content titles.

Recommendations For Drupal Print module version 5.x, update to version 5.x-4.5 or later. For Drupal Print module version 6.x, update to version 6.x-1.5 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-1343

Affected Products

Drupal Print Module

References · 6

• http://vupen.com/english/advisories/2009/1060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1343 · Security Note
• http://secunia.com/advisories/34738 · Vendor Advisory
• http://drupal.org/node/434748 · Patch
• http://securityfocus.com/bid/34545 · Patch
• http://osvdb.org/53704 · Note