Drupal Taxonomy Manager Administrative Page HTML Injection Vulnerability
BID:35286
Info
Drupal Taxonomy Manager Administrative Page HTML Injection Vulnerability
| Bugtraq ID: | 35286 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-2079 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2009 12:00AM |
| Updated: | Apr 13 2015 09:10PM |
| Credit: | Justin Klein Keane |
| Vulnerable: |
Drupal Taxonomy Manager 6.x Drupal Taxonomy Manager 5.x |
| Not Vulnerable: |
Drupal Taxonomy Manager 6.x-1.1 Drupal Taxonomy Manager 5.x-1.2 |
Discussion
Drupal Taxonomy Manager Administrative Page HTML Injection Vulnerability
The Taxonomy Manager module for Drupal is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
Note that to exploit this issue, attackers require valid authentication credentials with 'administer taxonomy' privileges.
http://drupal.org/node/207891
The Taxonomy Manager module for Drupal is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
Note that to exploit this issue, attackers require valid authentication credentials with 'administer taxonomy' privileges.
http://drupal.org/node/207891
Exploit / POC
Drupal Taxonomy Manager Administrative Page HTML Injection Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Drupal Taxonomy Manager Administrative Page HTML Injection Vulnerability
Solution:
Vendor updates are available. Please see the references for details.
Solution:
Vendor updates are available. Please see the references for details.
References
Drupal Taxonomy Manager Administrative Page HTML Injection Vulnerability
References:
References:
- SA-CONTRIB-2009-034 - Taxonomy manager - Cross site scripting (Drupal)
- Taxonomy Homepage (Drupal)
- taxonomy_manager 5.x-1.2 (Drupal)
- taxonomy_manager 6.x-1.1 (Drupal)