Drupal Advertisement Module Multiple HTML Injection Vulnerabilities

Bugtraq ID:	33747
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 11 2009 12:00AM
Updated:	Feb 11 2009 11:38PM
Credit:	Justin C. Klein Keane
Vulnerable:	Drupal Advertisement Module 5.x-1.6
Not Vulnerable:	Drupal Advertisement Module 6.x-1.0-rc1 Drupal Advertisement Module 5.x-1.7

Drupal Advertisement Module Multiple HTML Injection Vulnerabilities

The Advertisement module for Drupal is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Versions prior to Advertisement 5.x-1.7 and 6.x-1.0-rc1 are vulnerable.

Drupal Advertisement Module Multiple HTML Injection Vulnerabilities

Attackers can exploit these issues with a web browser.

Drupal Advertisement Module Multiple HTML Injection Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Drupal Advertisement Module 5.x-1.6

• Drupal ad-5.x-1.7.tar.gz
  http://ftp.drupal.org/files/projects/ad-5.x-1.7.tar.gz

Drupal Advertisement Module Multiple HTML Injection Vulnerabilities

References:

• Advertisement Module Homepage (Drupal)
  
• SA-CONTRIB-2009-007 - Advertisement Cross-site scripting (Drupal)