NVD

Id
48844  
Name
CVE-2009-1575  
Description
Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-05-06  
Modified Date
2009-05-20  
Seq
2009-1575  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246775 48844 CVE-2009-1575 http://drupal.org/node/449078  View
246776 48844 CVE-2009-1575 DSA-1792  View
246777 48844 CVE-2009-1575 http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953  View
246778 48844 CVE-2009-1575 ADV-2009-1216  View
246779 48844 CVE-2009-1575 drupal-utf7-xss(50250)  View
246780 48844 CVE-2009-1575 FEDORA-2009-4175  View
246781 48844 CVE-2009-1575 FEDORA-2009-4203  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40849 JVNDB-2009-001855 Drupal におけるクロスサイトスクリプティングの脆弱性 Drupal には、Content-Type メタタグ以前にある UTF-8 バイトシーケンスの処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1575 39006 CVE-2009-1575 48844 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001855.html 2009-04-30 2009-08-07 View