CVE-2009-1069

Опубликовано: 26 мар. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module.

Ссылки

http://drupal.org/node/406520
Patch
Vendor Advisory
http://osvdb.org/52783
http://osvdb.org/52784
http://secunia.com/advisories/34370
Vendor Advisory
http://www.securityfocus.com/bid/34172
https://exchange.xforce.ibmcloud.com/vulnerabilities/49317
http://drupal.org/node/406520
Patch
Vendor Advisory
http://osvdb.org/52783
http://osvdb.org/52784
http://secunia.com/advisories/34370
Vendor Advisory
http://www.securityfocus.com/bid/34172
https://exchange.xforce.ibmcloud.com/vulnerabilities/49317

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:drupal:content_construction_kit:6.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-1.0:alpha:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-1.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:beta:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc10:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc2:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc3:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc4:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc5:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc6:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc7:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc8:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc9:*:*:*:*:*:*

cpe:2.3:a:drupal:content_construction_kit:6.x-2.1:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00404

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-3jjw-w3h4-qj5p

github

около 3 лет назад