CVE-2009-4525

CVE-2009-4525 is a Drupal Print module XSS vulnerability: versions 5.x before 5.x-4.9 and 6.x before 6.x-1.9 allow remote attackers to inject arbitrary web script or HTML via crafted data in a list of links. Remediation details are not provided in the supplied documents.

CVE-2009-4526: Undefined Security Weakness

The Send by e-mail sub-module in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, does not properly enforce privilege requirements, which allows remote attackers to read page titles by requesting a "Send to friend" form...

CVE-2009-3210

Multiple cross-site scripting XSS vulnerabilities in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3210

Multiple cross-site scripting XSS vulnerabilities in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3210

CVE-2009-3210 involves a vulnerability in Drupal’s Print (Printer, e-mail and PDF versions) module. Affected versions are Drupal 5.x prior to 5.x-4.8 and 6.x prior to 6.x-1.8. The issue is described as multiple cross-site scripting (XSS) vulnerabilities that allow remote authenticated users to in...

[Full-disclosure] Drupal Print Module Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Report Date of Original Vendor Contact: May 27, 2009 Author: Justin C. Klein Keane [email protected] Details of this vulnerability are also posted at the public URL http://lampsecurity.org/drupal-print-module-vulnerabilities Descriptio...

Cross site scripting

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to...

CVE-2009-1823

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to...

CVE-2009-1823

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to...

CVE-2009-1823

CVE-2009-1823 is a Drupal Print module XSS affecting 5.x before 5.x-4.7 and 6.x before 6.x-1.7. It allows remote attackers to inject arbitrary script or HTML by modifying the document head with crafted UTF-8 bytes that IE6/IE7 treat as UTF-7. Related to CVE-2009-1575; other related Drupal XSS ent...

Cross site scripting

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.5 and 6.x before 6.x-1.5, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via content titles...

CVE-2009-1343

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.5 and 6.x before 6.x-1.5, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via content titles...

CVE-2009-1343

CVE-2009-1343 describes a cross-site scripting (XSS) vulnerability in the Drupal Print module (also known as Printer, e-mail and PDF versions). The flaw affects 5.x releases before 5.x-4.5 and 6.x releases before 6.x-1.5, where an attacker can inject arbitrary script or HTML via content titles. T...

CVE-2008-2124

SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...

CVE-2008-2124

SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...

fipscms-sql.txt

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: Blind SQL...

FipsCMS 2.1 - print.asp SQL Injection

FipsCMS 2.1 - print.asp SQL Injection |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

FipsCMS 2.1 - 'print.asp' SQL Injection

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: Blind SQL...

fipsCMS (print.asp lg) Remote SQL Injection Vulnerability

No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...