Lucene search
HistoryDec 21, 2009 - 4:30 p.m.
CVE-2009-4370
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
43.9%
Cross-site scripting (XSS) vulnerability in the Menu module (modules/menu/menu.admin.inc) in Drupal Core 6.x before 6.15 allows remote authenticated users with permissions to create new menus to inject arbitrary web script or HTML via a menu description, which is not properly handled in the menu administration overview.
Affected configurations
Node
drupaldrupalMatch6.0
ORdrupaldrupalMatch6.0beta1
ORdrupaldrupalMatch6.0beta2
ORdrupaldrupalMatch6.0beta3
ORdrupaldrupalMatch6.0beta4
ORdrupaldrupalMatch6.0rc-1
ORdrupaldrupalMatch6.0rc-2
ORdrupaldrupalMatch6.0rc-3
ORdrupaldrupalMatch6.0rc-4
ORdrupaldrupalMatch6.1
ORdrupaldrupalMatch6.2
ORdrupaldrupalMatch6.3
ORdrupaldrupalMatch6.4
ORdrupaldrupalMatch6.5
ORdrupaldrupalMatch6.6
ORdrupaldrupalMatch6.7
ORdrupaldrupalMatch6.8
ORdrupaldrupalMatch6.9
ORdrupaldrupalMatch6.10
ORdrupaldrupalMatch6.11
ORdrupaldrupalMatch6.12
ORdrupaldrupalMatch6.13
ORdrupaldrupalMatch6.14
Related
freebsd
freebsd
drupal -- multiple cross-site scripting
2009-12-16 00:00:00
prion
prion
Cross site scripting
2009-12-21 16:30:00
nessus
nessus
FreeBSD : drupal -- multiple XSS (751823d4-f189-11de-9344-00248c9b4be7)
2009-12-27 00:00:00
ubuntucve
ubuntucve
CVE-2009-4370
2009-12-21 00:00:00
openvas
openvas
FreeBSD Ports: drupal5
2009-12-30 00:00:00
FreeBSD Ports: drupal5
2009-12-30 00:00:00
cve
cve
CVE-2009-4370
2009-12-21 16:30:00
cvelist
cvelist
CVE-2009-4370
2009-12-21 16:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
43.9%
Related for NVD:CVE-2009-4370