Drupal Error Handler Cross Site Scripting Vulnerability
BID:47994
Info
Drupal Error Handler Cross Site Scripting Vulnerability
| Bugtraq ID: | 47994 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 25 2011 12:00AM |
| Updated: | Apr 13 2015 09:17PM |
| Credit: | Heine Deelstra |
| Vulnerable: |
Drupal Drupal 6.9 Drupal Drupal 6.8 Drupal Drupal 6.7 Drupal Drupal 6.6 Drupal Drupal 6.5 Drupal Drupal 6.4 Drupal Drupal 6.3 Drupal Drupal 6.2 Drupal Drupal 6.18 Drupal Drupal 6.17 Drupal Drupal 6.16 Drupal Drupal 6.15 Drupal Drupal 6.15 Drupal Drupal 6.14 Drupal Drupal 6.13 Drupal Drupal 6.12 Drupal Drupal 6.11 Drupal Drupal 6.10 Drupal Drupal 6.1 Drupal Drupal 6.0 Rc4 Drupal Drupal 6.0 Rc3 Drupal Drupal 6.0 Rc2 Drupal Drupal 6.0 Rc1 Drupal Drupal 6.0 Dev Drupal Drupal 6.0 Beta4 Drupal Drupal 6.0 Beta3 Drupal Drupal 6.0 Beta2 Drupal Drupal 6.0 Beta1 Drupal Drupal 6.0 |
| Not Vulnerable: |
Drupal Drupal 6.22 Drupal Drupal 6.21 |
Exploit / POC
Drupal Error Handler Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
References
Drupal Error Handler Cross Site Scripting Vulnerability
References:
References:
- Drupal Homepage (Drupal)
- SA-CORE-2011-001 - Drupal core - Multiple vulnerabilities (Drupal Security Team)