Lucene search

[email protected]CVE-2009-4557

HistoryJan 04, 2010 - 9:30 p.m.

CVE-2009-4557

2010-01-0421:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-4557

cross-site scripting

xss

image assist module

drupal

nvd

remote code execution

html injection

2.1 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.0%

JSON

Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, to inject arbitrary web script or HTML via a node title.

Affected configurations

NVD

Node

unleashedmindimg_assistMatch5.x-1.0

unleashedmindimg_assistMatch5.x-1.1

unleashedmindimg_assistMatch5.x-1.2

unleashedmindimg_assistMatch5.x-1.3

unleashedmindimg_assistMatch5.x-1.4

unleashedmindimg_assistMatch5.x-1.5

unleashedmindimg_assistMatch5.x-1.6

unleashedmindimg_assistMatch5.x-1.7

unleashedmindimg_assistMatch5.x-1.x-dev

unleashedmindimg_assistMatch5.x-2.0-alpha1

unleashedmindimg_assistMatch5.x-2.0-alpha3

unleashedmindimg_assistMatch5.x-2.x-dev

unleashedmindimg_assistMatch5.x-3.x-dev

unleashedmindimg_assistMatch6.x-1.0

unleashedmindimg_assistMatch6.x-1.0-beta1

unleashedmindimg_assistMatch6.x-1.x-dev

unleashedmindimg_assistMatch6.x-2.0-alpha2

unleashedmindimg_assistMatch6.x-2.0-alpha3

unleashedmindimg_assistMatch6.x-2.x-dev

unleashedmindimg_assistMatch6.x-3.x-dev

AND

drupaldrupal

CPENameOperatorVersion
unleashedmind:img_assistunleashedmind img assisteq5.x-1.0
unleashedmind:img_assistunleashedmind img assisteq5.x-1.1
unleashedmind:img_assistunleashedmind img assisteq5.x-1.2
unleashedmind:img_assistunleashedmind img assisteq5.x-1.3
unleashedmind:img_assistunleashedmind img assisteq5.x-1.4
unleashedmind:img_assistunleashedmind img assisteq5.x-1.5
unleashedmind:img_assistunleashedmind img assisteq5.x-1.6
unleashedmind:img_assistunleashedmind img assisteq5.x-1.7
unleashedmind:img_assistunleashedmind img assisteq5.x-1.x-dev
unleashedmind:img_assistunleashedmind img assisteq5.x-2.0-alpha1

CPE	Name	Operator	Version
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.0
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.1
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.2
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.3
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.4
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.5
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.6
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.7
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-1.x-dev
unleashedmind:img_assist	unleashedmind img assist	eq	5.x-2.0-alpha1

Rows per page:

1-10 of 201

References

drupal.org/node/520564

osvdb.org/55866

secunia.com/advisories/35879

www.securityfocus.com/bid/35710

exchange.xforce.ibmcloud.com/vulnerabilities/51786

2.1 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.0%

JSON

Related for CVE-2009-4557

nvd1 prion1 cvelist1