EUVD-2009-0815

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the taxonomythemeadmintablebuilder function taxonomythemeadmin.inc in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the "administer taxonomy" permission, or the ability to create pages when tagging is...

CVE-2009-0818

Cross-site scripting XSS vulnerability in the taxonomythemeadmintablebuilder function taxonomythemeadmin.inc in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the "administer taxonomy" permission, or the ability to create pages when tagging is...

CVE-2009-0818

Cross-site scripting XSS vulnerability in the taxonomythemeadmintablebuilder function taxonomythemeadmin.inc in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the "administer taxonomy" permission, or the ability to create pages when tagging is...

CVE-2009-0818

The CVE-2009-0818 issue affects Drupal’s Taxonomy Theme module prior to 5.x-1.2, where the taxonomy_theme_admin_table_builder (taxonomy_theme_admin.inc) allows authenticated users with the "administer taxonomy" permission (or those who can create pages when tagging is enabled) to inject arbitrary...

Drupal Taxonomy Theme模块name参数HTML注入漏洞

BUGTRAQ ID: 33923 Drupal的Taxonomy Theme模块允许网站管理员基于分类、词汇或类型内容更改指定内容的主题。 Taxonomy Theme模块的taxonomythemeadmintablebuilder函数没有正确地检查用户提供输入。在taxonomythemeadmin.inc的388行： $form'table'$item-$data'key''title' = array'value' = $item-name; 由于没有使用checkplain或类似的函数对$item-name值执行过滤，拥有administer...

SA-CONTRIB-2009-008 - Taxonomy Theme - Cross site scripting

The Taxonomy Theme module allows a website adminstrator to change the theme of a given content item based on taxonomy, vocabulary or content type. It does not properly sanitize user-supplied data on a number of places. This allows users with the "administer taxonomy" permission, or, when tagging ...

Drupal Taxonomy Theme Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Version Tested: Taxonomy Theme 5.x-1.1 http://drupal.org/project/taxonomytheme Drupal 5.15 http://drupal.org Module maintainer and Drupal security team notified "The taxonomytheme module allows you to change the theme of a given node based on the...