Drupal NGP COO/CWP Integration Module Security Bypass and HTML Injection Vulnerabilities

Bugtraq ID:	36927
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 04 2009 12:00AM
Updated:	Nov 05 2009 06:37PM
Credit:	Sean Robertson, Dylan Wilder-Tack
Vulnerable:	Drupal NGP COO/CWP Integration 6.x-1.12
Not Vulnerable:	Drupal NGP COO/CWP Integration 6.x-1.13

Drupal NGP COO/CWP Integration Module Security Bypass and HTML Injection Vulnerabilities

Drupal NGP COO/CWP Integration module is prone to a security-bypass vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, control how the site is rendered to the user, or perform unauthorized actions; other attacks may also be possible.

Versions prior to NGP COO/CWP Integration 6.x-1.13 are vulnerable.

Drupal NGP COO/CWP Integration Module Security Bypass and HTML Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

Drupal NGP COO/CWP Integration Module Security Bypass and HTML Injection Vulnerabilities

Solution:
Updates are available. Please see the references for details.


Drupal NGP COO/CWP Integration 6.x-1.12

• Drupal crmngp-6.x-1.13.tar.gz
  http://ftp.drupal.org/files/projects/crmngp-6.x-1.13.tar.gz

Drupal NGP COO/CWP Integration Module Security Bypass and HTML Injection Vulnerabilities

References:

• Drupal Language Switcher Dropdown Homepage (Drupal)
  
• NGP COO/CWP Integration Homepage (Drupal)
  
• SA-CONTRIB-2009-094 - NGP COO/CWP Integration (crmngp) - Multiple Vulnerabilitie (Drupal)