Drupal Link Module 'Link Title' HTML Injection Vulnerability

Bugtraq ID:	36928
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 04 2009 12:00AM
Updated:	Nov 05 2009 06:57PM
Credit:	mr.baileys
Vulnerable:	Drupal Link 6.x-2.6 Drupal Link 5.x-2.5
Not Vulnerable:	Drupal Link 6.x-2.7 Drupal Link 5.x-2.6

Drupal Link Module 'Link Title' HTML Injection Vulnerability

The Link module for Drupal is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Versions prior to the following are vulnerable:

Link 5.x-2.6
Link 6.x-2.7
http://drupal.org/node/207891

Drupal Link Module 'Link Title' HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

Drupal Link Module 'Link Title' HTML Injection Vulnerability

Solution:
Updates are available. Please see the references for details.


Drupal Link 6.x-2.6

• Drupal link-6.x-2.7.tar.gz
  http://ftp.drupal.org/files/projects/link-6.x-2.7.tar.gz

Drupal Link 5.x-2.5

• Drupal link-5.x-2.6.tar.gz
  http://ftp.drupal.org/files/projects/link-5.x-2.6.tar.gz

Drupal Link Module 'Link Title' HTML Injection Vulnerability

References:

• Drupal Language Switcher Dropdown Homepage (Drupal)
  
• Link Module Homepage (Drupal)
  
• SA-CONTRIB-2009-096 - Link - Cross Site Scripting (Drupal)