Vulnerability Name:

CVE-2009-1844 (CCN-50520)

Assigned:2009-05-13
Published:2009-05-13
Updated:2009-06-08
Summary:Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the "HTML exports of books" feature; and (2) allow remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via the help text of an arbitrary vocabulary.
Note: vector 1 exists because of an incomplete fix for CVE-2009-1575.
CVSS v3 Severity:2.0 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): High
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:3.5 Low (CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N)
3.0 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
2.8 Low (CCN CVSS v2 Vector: AV:N/AC:M/Au:M/C:N/I:P/A:N)
2.5 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:M/C:N/I:P/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): Multiple_Instances
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-79
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2009-1844

Source: CCN
Type: DRUPAL-SA-CORE-2009-006
SA-CORE-2009-006 - Drupal core - Cross site scripting

Source: CONFIRM
Type: Patch
http://drupal.org/node/461886

Source: CCN
Type: SA35045
Drupal UTF-7 Script Insertion Vulnerability

Source: CCN
Type: SA35082
vbDrupal UTF-7 Script Insertion Vulnerability

Source: SECUNIA
Type: UNKNOWN
35282

Source: CCN
Type: SourceForge.net
vbDrupal

Source: DEBIAN
Type: UNKNOWN
DSA-1808

Source: DEBIAN
Type: DSA-1808
drupal6 -- insufficient input sanitising

Source: CCN
Type: OSVDB ID: 54525
vbDrupal UTF-7 Unspecified XSS

Source: CCN
Type: BID-34946
Drupal UTF-7 'book-export-html.tpl.php' HTML Injection Vulnerability

Source: CCN
Type: vbDrupal Forums/General/News and announcements, 05-14-2009, 03:50 PM
vbDrupal 5.18.0 released

Source: XF
Type: UNKNOWN
drupal-vbdrupal-utf7-xss(50520)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:drupal:drupal:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.1:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.2:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.3:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.4:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.5:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.6:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.7:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.8:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.9:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.10:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.11:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.12:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.13:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.14:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.15:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.16:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.2:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.3:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.4:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.5:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.6:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.7:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.8:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.9:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.10:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.11:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:drupal:drupal:5.6:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.1:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.2:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.3:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.4:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.5:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.7:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.2:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.8:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.9:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.3:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.4:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.10:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.5:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.11:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.12:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.6:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.9:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.7:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.13:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.15:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.10:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.16:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:6.11:*:*:*:*:*:*:*
  • OR cpe:/a:drupal:drupal:5.17:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    drupal drupal 5.0
    drupal drupal 5.1
    drupal drupal 5.2
    drupal drupal 5.3
    drupal drupal 5.4
    drupal drupal 5.5
    drupal drupal 5.6
    drupal drupal 5.7
    drupal drupal 5.8
    drupal drupal 5.9
    drupal drupal 5.10
    drupal drupal 5.11
    drupal drupal 5.12
    drupal drupal 5.13
    drupal drupal 5.14
    drupal drupal 5.15
    drupal drupal 5.16
    drupal drupal 6.0
    drupal drupal 6.1
    drupal drupal 6.2
    drupal drupal 6.3
    drupal drupal 6.4
    drupal drupal 6.5
    drupal drupal 6.6
    drupal drupal 6.7
    drupal drupal 6.8
    drupal drupal 6.9
    drupal drupal 6.10
    drupal drupal 6.11
    drupal drupal 5.6
    drupal drupal 6.0
    drupal drupal 5.0
    drupal drupal 5.1
    drupal drupal 5.1_rev1.1
    drupal drupal 5.2
    drupal drupal 5.3
    drupal drupal 5.4
    drupal drupal 5.5
    drupal drupal 5.7
    drupal drupal 6.2
    drupal drupal 5.8
    drupal drupal 6.1
    drupal drupal 5.9
    drupal drupal 6.3
    drupal drupal 6.4
    drupal drupal 5.10
    drupal drupal 6.5
    drupal drupal 5.11
    drupal drupal 5.12
    drupal drupal 6.6
    drupal drupal 6.9
    drupal drupal 6.7
    drupal drupal 5.13
    drupal drupal 5.15
    drupal drupal 6.10
    drupal drupal 5.16
    drupal drupal 6.11
    drupal drupal 5.17