Lucene search
MitreCVELIST:CVE-2009-2372HistoryJul 08, 2009 - 3:00 p.m.
CVE-2009-2372
2009-07-0815:00:00
mitre
www.cve.org
3
Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature.
Related
ubuntucve
ubuntucve
CVE-2009-2372
2009-07-08 00:00:00
cve
cve
CVE-2009-2372
2009-07-08 15:30:01
prion
prion
Format string
2009-07-08 15:30:00
nvd
nvd
CVE-2009-2372
2009-07-08 15:30:01
openvas
openvas
Drupal XSS and Code Injection Vulnerability
2009-07-15 00:00:00
Debian Security Advisory DSA 1930-1 (drupal6)
2009-11-11 00:00:00
FreeBSD Ports: drupal5
2009-07-15 00:00:00
debian
debian
[SECURITY] [DSA 1930-1] New drupal6 packages fix several vulnerabilities
2009-11-07 00:46:57
nessus
nessus
Debian DSA-1930-1 : drupal6 - several vulnerabilities
2010-02-24 00:00:00
osv
osv
drupal6 - several vulnerabilities
2009-11-07 00:00:00
freebsd
freebsd
drupal -- multiple vulnerabilities
2009-07-01 00:00:00