Drupal Search Keywords Module HTML Injection Vulnerability

Bugtraq ID:	20126
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 20 2006 12:00AM
Updated:	Sep 21 2006 06:36PM
Credit:	Andre Bar'yudin is credited with the discovery of this vulnerability.
Vulnerable:	Drupal Search Keyword 1.14 Drupal Search Keyword 1.13 Drupal Search Keyword 1.12
Not Vulnerable:	Drupal Search Keyword 1.15

Drupal Search Keywords Module HTML Injection Vulnerability

The Drupal Search Keywords module is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Search Key module versions prior to 1.15 for Drupal 4.7 are vulnerable to this issue.

This issue may allow an attacker to gain administrative privileges, provided that certain conditions are met.

Drupal Search Keywords Module HTML Injection Vulnerability

Attackers can exploit this issue via a web client.

Drupal Search Keywords Module HTML Injection Vulnerability

Solution:
The vendor has released version 4.7 revision 1.15 to address this issue. Please see the references for more information.

Drupal Search Keywords Module HTML Injection Vulnerability

References:

• Drupal Security Advisory DRUPAL-SA-2006-022 (Drupal)
  
• Search Keywords Home Page (Drupal)