Lucene search

[email protected]CVE-2009-2078

HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-2078

2022-10-0316:24:08

CWE-79

[email protected]

web.nvd.nist.gov

cve

2009

2078

xss

vulnerabilities

booktree

drupal

remote attackers

web script

html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page.

Affected configurations

NVD

Node

drupaldrupal

AND

heine.familiedeelstrabooktreeMatch5.x-1.1

heine.familiedeelstrabooktreeMatch5.x-1.2

heine.familiedeelstrabooktreeMatch5.x-1.3

heine.familiedeelstrabooktreeMatch5.x-1.4

heine.familiedeelstrabooktreeMatch5.x-1.9

heine.familiedeelstrabooktreeMatch5.x-1.xdev

heine.familiedeelstrabooktreeMatch5.x-7.0

heine.familiedeelstrabooktreeMatch5.x-7.1

heine.familiedeelstrabooktreeMatch5.x-7.2

heine.familiedeelstrabooktreeMatch6.x-1.0

heine.familiedeelstrabooktreeMatch6.x-1.xdev

CPENameOperatorVersion
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-1.1
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-1.2
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-1.3
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-1.4
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-1.9
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-1.x
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-7.0
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-7.1
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq5.x-7.2
heine.familiedeelstra:booktreeheine.familiedeelstra booktreeeq6.x-1.0

CPE	Name	Operator	Version
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-1.1
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-1.2
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-1.3
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-1.4
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-1.9
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-1.x
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-7.0
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-7.1
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	5.x-7.2
heine.familiedeelstra:booktree	heine.familiedeelstra booktree	eq	6.x-1.0

Rows per page:

1-10 of 111

References

drupal.org/node/487810

drupal.org/node/487812

drupal.org/node/487828

secunia.com/advisories/35421

www.securityfocus.com/bid/35287

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Related for CVE-2009-2078

prion1 nvd1 cvelist1