Lucene search

[email protected]CVE-2009-4532

HistoryDec 31, 2009 - 7:30 p.m.

CVE-2009-4532

2009-12-3119:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-4532

xss

vulnerability

drupal

webform module

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label.

Affected configurations

NVD

Node

nathan_haugwebformRange≤5.x-2.7

nathan_haugwebformRange≤6.x-2.7

nathan_haugwebformMatch5.x-1.2

nathan_haugwebformMatch5.x-1.3

nathan_haugwebformMatch5.x-1.4

nathan_haugwebformMatch5.x-1.5

nathan_haugwebformMatch5.x-1.6

nathan_haugwebformMatch5.x-1.7

nathan_haugwebformMatch5.x-1.8

nathan_haugwebformMatch5.x-1.9

nathan_haugwebformMatch5.x-1.10

nathan_haugwebformMatch5.x-1.x-dev

nathan_haugwebformMatch5.x-2.0

nathan_haugwebformMatch5.x-2.0-beta0

nathan_haugwebformMatch5.x-2.0-beta1

nathan_haugwebformMatch5.x-2.0-beta2

nathan_haugwebformMatch5.x-2.0-beta3

nathan_haugwebformMatch5.x-2.1

nathan_haugwebformMatch5.x-2.1.1

nathan_haugwebformMatch5.x-2.1.2

nathan_haugwebformMatch5.x-2.1.3

nathan_haugwebformMatch5.x-2.2

nathan_haugwebformMatch5.x-2.3

nathan_haugwebformMatch5.x-2.4

nathan_haugwebformMatch5.x-2.5

nathan_haugwebformMatch5.x-2.6

nathan_haugwebformMatch5.x-2.x-dev

nathan_haugwebformMatch6.x-2.0-beta1

nathan_haugwebformMatch6.x-2.0-beta2

nathan_haugwebformMatch6.x-2.0-beta3

nathan_haugwebformMatch6.x-2.0-beta4

nathan_haugwebformMatch6.x-2.0-beta5

nathan_haugwebformMatch6.x-2.0-beta6

nathan_haugwebformMatch6.x-2.1

nathan_haugwebformMatch6.x-2.1-1

nathan_haugwebformMatch6.x-2.1.2

nathan_haugwebformMatch6.x-2.1.3

nathan_haugwebformMatch6.x-2.2

nathan_haugwebformMatch6.x-2.3

nathan_haugwebformMatch6.x-2.4

nathan_haugwebformMatch6.x-2.5

nathan_haugwebformMatch6.x-2.6

nathan_haugwebformMatch6.x-2.x-dev

AND

drupaldrupal

CPENameOperatorVersion
nathan_haug:webformnathan haug webformle5.x-2.7
nathan_haug:webformnathan haug webformle6.x-2.7
nathan_haug:webformnathan haug webformeq5.x-1.2
nathan_haug:webformnathan haug webformeq5.x-1.3
nathan_haug:webformnathan haug webformeq5.x-1.4
nathan_haug:webformnathan haug webformeq5.x-1.5
nathan_haug:webformnathan haug webformeq5.x-1.6
nathan_haug:webformnathan haug webformeq5.x-1.7
nathan_haug:webformnathan haug webformeq5.x-1.8
nathan_haug:webformnathan haug webformeq5.x-1.9

CPE	Name	Operator	Version
nathan_haug:webform	nathan haug webform	le	5.x-2.7
nathan_haug:webform	nathan haug webform	le	6.x-2.7
nathan_haug:webform	nathan haug webform	eq	5.x-1.2
nathan_haug:webform	nathan haug webform	eq	5.x-1.3
nathan_haug:webform	nathan haug webform	eq	5.x-1.4
nathan_haug:webform	nathan haug webform	eq	5.x-1.5
nathan_haug:webform	nathan haug webform	eq	5.x-1.6
nathan_haug:webform	nathan haug webform	eq	5.x-1.7
nathan_haug:webform	nathan haug webform	eq	5.x-1.8
nathan_haug:webform	nathan haug webform	eq	5.x-1.9

Rows per page:

1-10 of 431

References

drupal.org/node/604942

osvdb.org/58945

secunia.com/advisories/37021

www.securityfocus.com/bid/36708

www.vupen.com/english/advisories/2009/2923

exchange.xforce.ibmcloud.com/vulnerabilities/53796

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

Related for CVE-2009-4532

nvd1 prion1 cvelist1