Drupal download_count Module Cross Site Scripting Vulnerability
BID:40275
Info
Drupal download_count Module Cross Site Scripting Vulnerability
| Bugtraq ID: | 40275 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 19 2010 12:00AM |
| Updated: | May 19 2010 12:00AM |
| Credit: | Peter Wolanin, John Morahan, Dylan Tack, Kieran Lal, Ivo Van Geertruyen, Martin Barbella, Brandon Bergren, George Gongadze |
| Vulnerable: |
Drupal download_count 6.x-1.3 Drupal download_count 5.x-1.1 |
| Not Vulnerable: | |
Discussion
Drupal download_count Module Cross Site Scripting Vulnerability
The download_count module for Drupal is prone to cross-site scripting because it fails to properly sanitize user-supplied input before using it in dynamically generated content.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Note that this package has been abandoned; vendor-supplied fixes are not expected.
download_count versions 5.x-1.0 and 6.x-1.3 are vulnerable; other versions may also be affected.
The download_count module for Drupal is prone to cross-site scripting because it fails to properly sanitize user-supplied input before using it in dynamically generated content.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Note that this package has been abandoned; vendor-supplied fixes are not expected.
download_count versions 5.x-1.0 and 6.x-1.3 are vulnerable; other versions may also be affected.
Exploit / POC
Drupal download_count Module Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
Solution / Fix
Drupal download_count Module Cross Site Scripting Vulnerability
Solution:
This package has been abandoned; vendor-supplied fixes are not expected. Please see the references for more information.
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution:
This package has been abandoned; vendor-supplied fixes are not expected. Please see the references for more information.
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
References
Drupal download_count Module Cross Site Scripting Vulnerability
References:
References: