BID:20628

Drupal Multiple HTML-Injection Vulnerabilities

Info

Drupal Multiple HTML-Injection Vulnerabilities

Bugtraq ID:	20628
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 19 2006 12:00AM
Updated:	Oct 20 2006 05:43PM
Credit:	Erdem Köse, Jim Phlew, and the Drupal security team are credited with the discovery of these vulnerabilities.
Vulnerable:	OpenPKG OpenPKG 2.5 OpenPKG OpenPKG 2.4 OpenPKG OpenPKG 2.3 OpenPKG OpenPKG 2.2 OpenPKG OpenPKG 2.1 OpenPKG OpenPKG 2.0 OpenPKG OpenPKG Stable Drupal Drupal 4.7.3 Drupal Drupal 4.7.2 Drupal Drupal 4.7.1 Drupal Drupal 4.7 Drupal Drupal 4.6.9 Drupal Drupal 4.6.8 Drupal Drupal 4.6.7 Drupal Drupal 4.6.6 Drupal Drupal 4.6.5 Drupal Drupal 4.6.4 Drupal Drupal 4.6.3 Drupal Drupal 4.6.2 Drupal Drupal 4.6.1 Drupal Drupal 4.6 Drupal Drupal 4.7 revision 1.15 Drupal Drupal 4.7 Drupal Drupal 4.6

Not Vulnerable:	Drupal Drupal 4.7.4 Drupal Drupal 4.6.10

Discussion

Drupal Multiple HTML-Injection Vulnerabilities

Drupal is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials, control how the site is rendered, and launch other attacks.

Exploit / POC

Drupal Multiple HTML-Injection Vulnerabilities

An attacker can exploit this issue with a web client.

Solution / Fix

Drupal Multiple HTML-Injection Vulnerabilities

Solution:
The vendor has addressed these issues in versions 4.6.10 and 4.7.4.

Please see the referenced advisories for further information.

Drupal Drupal 4.6