CVE-2009-3918 - Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title

Published Nov 9, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.26%

Description

Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (8)

http://drupal.org/node/623434
x_refsource_CONFIRMPatchVendor Advisory
http://drupal.org/node/623436
x_refsource_CONFIRMPatchVendor Advisory
http://drupal.org/node/623678
x_refsource_CONFIRMPatchVendor Advisory
http://osvdb.org/59671
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/37263
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/36930
vdb-entryx_refsource_BIDPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3889
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54155
vdb-entryx_refsource_XF

Link	Providers	Tags
http://drupal.org/node/623434		x_refsource_CONFIRMPatchVendor Advisory
http://drupal.org/node/623436		x_refsource_CONFIRMPatchVendor Advisory
http://drupal.org/node/623678		x_refsource_CONFIRMPatchVendor Advisory
http://osvdb.org/59671		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/37263		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/36930		vdb-entryx_refsource_BIDPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3889		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54155		vdb-entryx_refsource_XF