BID:40283

Drupal Rotor Banner Module Multiple HTML Injection Vulnerabilities

Info

Drupal Rotor Banner Module Multiple HTML Injection Vulnerabilities

Bugtraq ID:	40283
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 27 2010 12:00AM
Updated:	Mar 27 2010 12:00AM
Credit:	Martin Barbella
Vulnerable:	Drupal Rotor 6.x-2.4 Drupal Rotor 6.x-2.3 Drupal Rotor 6.x-2.2 Drupal Rotor 6.x-2.1 Drupal Rotor 6.x-2.0-rc1 Drupal Rotor 6.x-2.0-beta3 Drupal Rotor 6.x-2.0-beta2 Drupal Rotor 6.x-2.0-beta1 Drupal Rotor 6.x-2.0 Drupal Rotor 6.x-1.4 Drupal Rotor 6.x-1.3 Drupal Rotor 6.x-1.2 Drupal Rotor 5.x-1.7 Drupal Rotor 5.x-1.6 Drupal Rotor 5.x-1.5

Not Vulnerable:	Drupal Rotor 6.x-2.5 Drupal Rotor 5.x-1.8

Discussion

Drupal Rotor Banner Module Multiple HTML Injection Vulnerabilities

The Rotor Banner module for Drupal is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Versions prior to Rotor Banner 5.x-1.8 and 6.x-2.5 are vulnerable.

Exploit / POC

Drupal Rotor Banner Module Multiple HTML Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

Solution / Fix

Drupal Rotor Banner Module Multiple HTML Injection Vulnerabilities

Solution:
Updates are available; please see the references for more information.

Drupal Rotor 5.x-1.6