Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-1575
HistoryMay 06, 2009 - 5:30 p.m.

CVE-2009-1575

2009-05-0617:30:09
CWE-79
[email protected]
web.nvd.nist.gov
31
cve-2009-1575
cross-site scripting
xss
drupal
remote code injection
internet explorer 6
internet explorer 7

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.6%

JSON

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7.

Affected configurations

NVD
Node
drupaldrupalMatch5.0
OR
drupaldrupalMatch5.0beta1
OR
drupaldrupalMatch5.0beta2
OR
drupaldrupalMatch5.0rc1
OR
drupaldrupalMatch5.0rc2
OR
drupaldrupalMatch5.1
OR
drupaldrupalMatch5.1_rev1.1
OR
drupaldrupalMatch5.2
OR
drupaldrupalMatch5.3
OR
drupaldrupalMatch5.4
OR
drupaldrupalMatch5.5
OR
drupaldrupalMatch5.5.
OR
drupaldrupalMatch5.6
OR
drupaldrupalMatch5.7
OR
drupaldrupalMatch5.8
OR
drupaldrupalMatch5.9
OR
drupaldrupalMatch5.10
OR
drupaldrupalMatch5.11
OR
drupaldrupalMatch5.12
OR
drupaldrupalMatch5.13
OR
drupaldrupalMatch5.14
OR
drupaldrupalMatch5.15
OR
drupaldrupalMatch5.16
OR
drupaldrupalMatch6
OR
drupaldrupalMatch6beta1
OR
drupaldrupalMatch6.0
OR
drupaldrupalMatch6.0beta1
OR
drupaldrupalMatch6.0beta2
OR
drupaldrupalMatch6.0beta3
OR
drupaldrupalMatch6.0beta4
OR
drupaldrupalMatch6.0rc-1
OR
drupaldrupalMatch6.0rc-2
OR
drupaldrupalMatch6.0rc-3
OR
drupaldrupalMatch6.0rc-4
OR
drupaldrupalMatch6.1
OR
drupaldrupalMatch6.2
OR
drupaldrupalMatch6.3
OR
drupaldrupalMatch6.4
OR
drupaldrupalMatch6.5
OR
drupaldrupalMatch6.6
OR
drupaldrupalMatch6.7
OR
drupaldrupalMatch6.8
OR
drupaldrupalMatch6.9
OR
drupaldrupalMatch6.10

Related

prion 3
ubuntucve 2
nvd 3
cvelist 3
nessus 4
openvas 6
cve 2
osv 1
freebsd 1
prion
prion
Cross site scripting
2009-05-06 17:30:00
Cross site scripting
2009-06-01 14:30:00
Cross site scripting
2009-05-29 16:30:00
ubuntucve
ubuntucve
CVE-2009-1575
2009-05-06 00:00:00
CVE-2009-1844
2009-06-01 00:00:00
nvd
nvd
CVE-2009-1575
2009-05-06 17:30:09
CVE-2009-1823
2009-05-29 16:30:00
CVE-2009-1844
2009-06-01 14:30:00
cvelist
cvelist
CVE-2009-1575
2009-05-06 17:00:00
CVE-2009-1823
2009-05-29 16:24:00
CVE-2009-1844
2009-06-01 14:00:00
nessus
nessus
Fedora 10 : drupal-6.11-1.fc10 (2009-4175)
2009-05-04 00:00:00
FreeBSD : drupal -- XSS (7a1ab8d4-35c1-11de-9672-0030843d3802)
2009-05-01 00:00:00
Debian DSA-1792-1 : drupal6 - multiple vulnerabilities
2009-05-08 00:00:00
openvas
openvas
FreeBSD Ports: drupal5
2009-05-05 00:00:00
Debian: Security Advisory (DSA-1792-1)
2009-05-11 00:00:00
Debian Security Advisory DSA 1792-1 (drupal6)
2009-05-11 00:00:00
cve
cve
CVE-2009-1844
2009-06-01 14:30:00
CVE-2009-1823
2009-05-29 16:30:00
osv
osv
drupal6 - multiple vulnerabilities
2009-05-06 00:00:00
freebsd
freebsd
drupal -- cross site scripting
2009-04-30 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.6%

JSON
Related for CVE-2009-1575
prion3ubuntucve2nvd3cvelist3nessus4openvas6cve2osv1freebsd1