CVE-2009-4429
Published Dec 28, 2009
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name (aka the Name field).
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.5
- Impact score
- 2.9
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:alexander_hass:sections_module:5.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F681C08-596E-4EA4-897E-E6A1BDCE5316"
},
{
"criteria": "cpe:2.3:a:alexander_hass:sections_module:5.x-1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EEBAAFF-FF7A-4890-85A0-BF4A8733B644"
},
{
"criteria": "cpe:2.3:a:alexander_hass:sections_module:5.x-1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CAD92B36-CCAB-4F8F-91E1-40ADF60A9490"
},
{
"criteria": "cpe:2.3:a:alexander_hass:sections_module:5.x-1.x-dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "947DCA57-3445-4727-8F85-16DE5C9C1B27"
},
{
"criteria": "cpe:2.3:a:alexander_hass:sections_module:6.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2159DE60-2546-47A9-B6A6-91E8AB5EF5B2"
},
{
"criteria": "cpe:2.3:a:alexander_hass:sections_module:6.x-1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91C956B3-D216-4952-9152-D587F881C6FF"
},
{
"criteria": "cpe:2.3:a:alexander_hass:sections_module:6.x-1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "511C853F-60BC-4998-98FF-10B7542F1C7E"
},
{
"criteria": "cpe:2.3:a:alexander_hass:sections_module:6.x-1.x-dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A18B209E-3E9A-464F-B3EC-221F66BA2FC9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]