Drupal Nodequeue Module Security Bypass and Cross Site Scripting Vulnerabilities
BID:35305
Info
Drupal Nodequeue Module Security Bypass and Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 35305 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2009 12:00AM |
| Updated: | Jun 15 2009 07:09PM |
| Credit: | Justin C. Klein Keane and Ezra Barnett Gildesgame. |
| Vulnerable: |
Drupal Nodequeue 6.X-2.1 Drupal Nodequeue 5.x-2.6 |
| Not Vulnerable: |
Drupal Nodequeue 6.x-2.2 Drupal Nodequeue 5.x-2.7 |
Discussion
Drupal Nodequeue Module Security Bypass and Cross Site Scripting Vulnerabilities
The Drupal Nodequeue module is prone to a security-bypass and a cross-site scripting vulnerability because it fails to properly validate user credentials and sanitize user-supplied input.
An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
The attacker may leverage the security-bypass issue to view or modify data, despite the attacker's insufficient privileges.
The following are affected:
Nodequeue for Drupal 5.x prior to 5.x-2.7
Nodequeue for Drupal 6.x prior to 6.x-2.2
The Drupal Nodequeue module is prone to a security-bypass and a cross-site scripting vulnerability because it fails to properly validate user credentials and sanitize user-supplied input.
An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
The attacker may leverage the security-bypass issue to view or modify data, despite the attacker's insufficient privileges.
The following are affected:
Nodequeue for Drupal 5.x prior to 5.x-2.7
Nodequeue for Drupal 6.x prior to 6.x-2.2
Exploit / POC
Drupal Nodequeue Module Security Bypass and Cross Site Scripting Vulnerabilities
Attackers can use a browser to exploit the issues.
Attackers can use a browser to exploit the issues.
Solution / Fix
Drupal Nodequeue Module Security Bypass and Cross Site Scripting Vulnerabilities
Solution:
The vendor has released updates. Please see the references for details.
Drupal Nodequeue 5.x-2.6
Drupal Nodequeue 6.X-2.1
Solution:
The vendor has released updates. Please see the references for details.
Drupal Nodequeue 5.x-2.6
-
Drupal nodequeue-5.x-2.7.tar.gz
http://ftp.drupal.org/files/projects/nodequeue-5.x-2.7.tar.gz
Drupal Nodequeue 6.X-2.1
-
Drupal nodequeue-6.x-2.2.tar.gz
http://ftp.drupal.org/files/projects/nodequeue-6.x-2.2.tar.gz
References
Drupal Nodequeue Module Security Bypass and Cross Site Scripting Vulnerabilities
References:
References:
- Nodequeue Homepage (Drupal)
- SA-CONTRIB-2009-038 - Nodequeue - Multiple vulnerabilities (Drupal)