CVE-2009-3479

Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title.
References
Link Resource
http://drupal.org/node/534752 Patch Vendor Advisory
http://www.securityfocus.com/bid/35865 Patch
http://secunia.com/advisories/36083 Vendor Advisory
http://drupal.org/node/534744 Patch Vendor Advisory
http://drupal.org/node/534842 Patch Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
OR cpe:2.3:a:ron_jerome:bibliography:5.x-1.3:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.4:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.5:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.6:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.x-dev:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta2:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta3:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta4:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta5:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc3:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc4:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.1:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.12:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.x-dev:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.7:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc5:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.11:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta6:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.5:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.2:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.3:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta8:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.0:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.9:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.13:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.2:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.10:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.15:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.14:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.8:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.1:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:5.x-1.16:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta9:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta1:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.4:*:*:*:*:*:*:*
cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta7:*:*:*:*:*:*:*

Information

Published : 2009-09-30 08:30

Updated : 2009-09-30 21:00


NVD link : CVE-2009-3479

Mitre link : CVE-2009-3479


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

ron_jerome

  • bibliography

drupal

  • drupal