PT-2009-5923 · Drupal · Browscap

Greg Knaddison + 1 · Published 2009-10-09 · Updated 2017-08-17 · CVE-2009-3651

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Browscap versions prior to 5.x-1.1 Browscap versions prior to 6.x-1.1

Description A cross-site scripting (XSS) issue exists in the Monitor browsers' feature of the Browscap module for Drupal. This issue allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.

Recommendations For Browscap versions prior to 5.x-1.1, update to version 5.x-1.1 or later. For Browscap versions prior to 6.x-1.1, update to version 6.x-1.1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-3651

Affected Products

Browscap

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-3651 · Security Note
• http://osvdb.org/58444 · Patch
• http://secunia.com/advisories/36912 · Vendor Advisory
• http://drupal.org/node/592264 · Vendor Advisory
• http://drupal.org/node/592272 · Vendor Advisory
• http://drupal.org/node/592262 · Vendor Advisory
• http://securityfocus.com/bid/36557 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53571 · Note