Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-1575
HistoryMay 06, 2009 - 5:30 p.m.

CVE-2009-1575

2009-05-0617:30:09
CWE-79
[email protected]
web.nvd.nist.gov
2

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

71.6%

JSON

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7.

Affected configurations

Nvd
Node
drupaldrupalMatch5.0
OR
drupaldrupalMatch5.0beta1
OR
drupaldrupalMatch5.0beta2
OR
drupaldrupalMatch5.0rc1
OR
drupaldrupalMatch5.0rc2
OR
drupaldrupalMatch5.1
OR
drupaldrupalMatch5.1_rev1.1
OR
drupaldrupalMatch5.2
OR
drupaldrupalMatch5.3
OR
drupaldrupalMatch5.4
OR
drupaldrupalMatch5.5
OR
drupaldrupalMatch5.5.
OR
drupaldrupalMatch5.6
OR
drupaldrupalMatch5.7
OR
drupaldrupalMatch5.8
OR
drupaldrupalMatch5.9
OR
drupaldrupalMatch5.10
OR
drupaldrupalMatch5.11
OR
drupaldrupalMatch5.12
OR
drupaldrupalMatch5.13
OR
drupaldrupalMatch5.14
OR
drupaldrupalMatch5.15
OR
drupaldrupalMatch5.16
OR
drupaldrupalMatch6
OR
drupaldrupalMatch6beta1
OR
drupaldrupalMatch6.0
OR
drupaldrupalMatch6.0beta1
OR
drupaldrupalMatch6.0beta2
OR
drupaldrupalMatch6.0beta3
OR
drupaldrupalMatch6.0beta4
OR
drupaldrupalMatch6.0rc-1
OR
drupaldrupalMatch6.0rc-2
OR
drupaldrupalMatch6.0rc-3
OR
drupaldrupalMatch6.0rc-4
OR
drupaldrupalMatch6.1
OR
drupaldrupalMatch6.2
OR
drupaldrupalMatch6.3
OR
drupaldrupalMatch6.4
OR
drupaldrupalMatch6.5
OR
drupaldrupalMatch6.6
OR
drupaldrupalMatch6.7
OR
drupaldrupalMatch6.8
OR
drupaldrupalMatch6.9
OR
drupaldrupalMatch6.10

Related

prion 3
ubuntucve 2
cve 3
cvelist 3
openvas 6
nessus 4
freebsd 1
nvd 2
osv 1
prion
prion
Cross site scripting
2009-05-06 17:30:00
Cross site scripting
2009-05-29 16:30:00
Cross site scripting
2009-06-01 14:30:00
ubuntucve
ubuntucve
CVE-2009-1575
2009-05-06 00:00:00
CVE-2009-1844
2009-06-01 00:00:00
cve
cve
CVE-2009-1575
2009-05-06 17:30:09
CVE-2009-1844
2009-06-01 14:30:00
CVE-2009-1823
2009-05-29 16:30:00
cvelist
cvelist
CVE-2009-1575
2009-05-06 17:00:00
CVE-2009-1823
2009-05-29 16:24:00
CVE-2009-1844
2009-06-01 14:00:00
openvas
openvas
Debian Security Advisory DSA 1792-1 (drupal6)
2009-05-11 00:00:00
Debian: Security Advisory (DSA-1792-1)
2009-05-11 00:00:00
Fedora Core 10 FEDORA-2009-4175 (drupal)
2009-05-05 00:00:00
nessus
nessus
Fedora 10 : drupal-6.11-1.fc10 (2009-4175)
2009-05-04 00:00:00
Debian DSA-1792-1 : drupal6 - multiple vulnerabilities
2009-05-08 00:00:00
Fedora 9 : drupal-6.11-1.fc9 (2009-4203)
2009-05-04 00:00:00
freebsd
freebsd
drupal -- cross site scripting
2009-04-30 00:00:00
nvd
nvd
CVE-2009-1823
2009-05-29 16:30:00
CVE-2009-1844
2009-06-01 14:30:00
osv
osv
drupal6 - multiple vulnerabilities
2009-05-06 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.003

Percentile

71.6%

JSON
Related for NVD:CVE-2009-1575
prion3ubuntucve2cve3cvelist3openvas6nessus4freebsd1nvd2osv1