Drupal Mailsave Module MIME Type HTML Injection Vulnerability

Bugtraq ID:	31232
Class:	Input Validation Error
CVE:	CVE-2008-4147
Remote:	Yes
Local:	No
Published:	Sep 17 2008 12:00AM
Updated:	May 07 2015 05:23PM
Credit:	Mark Burdett (mfb)
Vulnerable:	Drupal Mailsave Module 6.x-1.2 Drupal Mailsave Module 5.x-3.2
Not Vulnerable:	Drupal Mailsave Module 6.x-1.3 Drupal Mailsave Module 5.x-3.3

Drupal Mailsave Module MIME Type HTML Injection Vulnerability

The Mailsave module for Drupal is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

This issue affects versions prior to Mailsave 5.x-3.3 and prior to 6.x-1.3.
http://drupal.org/node/207891

Drupal Mailsave Module MIME Type HTML Injection Vulnerability

Attackers can use standard tools to exploit this issue.

Drupal Mailsave Module MIME Type HTML Injection Vulnerability

Solution:
Fixes are available. Please see the references for more information.


Drupal Mailsave Module 5.x-3.2

• Drupal Mailsave 5.x-3.3
  http://drupal.org/node/297842

Drupal Mailsave Module 6.x-1.2

• Drupal Mailsave 6.x-1.3
  http://drupal.org/node/297841

Drupal Mailsave Module MIME Type HTML Injection Vulnerability

References:

• Mailsave Homepage (Drupal)
  
• SA-2008-051 - Mailsave - Cross site scripting (Drupal)