Drupal Ajax Table Module Security Bypass and HTML Injection Vulnerabilities

Bugtraq ID:	36165
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 26 2009 12:00AM
Updated:	Aug 26 2009 08:52PM
Credit:	Franz Heinzmann
Vulnerable:	Drupal Ajax Table 5.x
Not Vulnerable:

Drupal Ajax Table Module Security Bypass and HTML Injection Vulnerabilities

Drupal Ajax Table module is prone to a security-bypass vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, control how the site is rendered to the user, or perform unauthorized actions; other attacks may also be possible.

Ajax Table 5.x is vulnerable.

Drupal Ajax Table Module Security Bypass and HTML Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

Drupal Ajax Table Module Security Bypass and HTML Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Drupal Ajax Table Module Security Bypass and HTML Injection Vulnerabilities

References:

• Drupal Language Switcher Dropdown Homepage (Drupal)
  
• SA-CONTRIB-2009-053 - Ajax Table - Multiple vulnerabilities (Drupal)