Lucene search

[email protected]CVE-2009-4061

HistoryNov 24, 2009 - 2:30 a.m.

CVE-2009-4061

2009-11-2402:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-4061

xss

vulnerabilities

drupal

agreement module

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Agreement module 6.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

yuriy_babenkoagreement_moduleMatch6.x-1.0

yuriy_babenkoagreement_moduleMatch6.x-1.1

yuriy_babenkoagreement_moduleMatch6.x-1.x-dev

AND

drupaldrupal

CPENameOperatorVersion
yuriy_babenko:agreement_moduleyuriy babenko agreement moduleeq6.x-1.0
yuriy_babenko:agreement_moduleyuriy babenko agreement moduleeq6.x-1.1
yuriy_babenko:agreement_moduleyuriy babenko agreement moduleeq6.x-1.x-dev

CPE	Name	Operator	Version
yuriy_babenko:agreement_module	yuriy babenko agreement module	eq	6.x-1.0
yuriy_babenko:agreement_module	yuriy babenko agreement module	eq	6.x-1.1
yuriy_babenko:agreement_module	yuriy babenko agreement module	eq	6.x-1.x-dev

References

drupal.org/node/631538

drupal.org/node/636568

osvdb.org/60274

secunia.com/advisories/37437

www.securityfocus.com/bid/37057

exchange.xforce.ibmcloud.com/vulnerabilities/54342

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

JSON

Related for CVE-2009-4061

prion1 nvd1 cvelist1