Drupal Print Module Security Bypass Vulnerability
BID:48532
Info
Drupal Print Module Security Bypass Vulnerability
| Bugtraq ID: | 48532 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 30 2011 12:00AM |
| Updated: | Jun 30 2011 12:00AM |
| Credit: | MustLive |
| Vulnerable: |
Drupal Drupal 7.x-1.x-dev Drupal Drupal 6.x-1.12 Drupal Drupal 5.x-4.11 |
| Not Vulnerable: | |
Discussion
Drupal Print Module Security Bypass Vulnerability
The 'Print' module for Drupal is prone to a security-bypass vulnerability.
An attacker may leverage the issue to use the application that is hosting the vulnerable module to send spam or arbitrary emails.
The following versions and prior are affected:
Drupal 5.x-4.11
Drupal 6.x-1.12
Drupal 7.x-1.x-dev
The 'Print' module for Drupal is prone to a security-bypass vulnerability.
An attacker may leverage the issue to use the application that is hosting the vulnerable module to send spam or arbitrary emails.
The following versions and prior are affected:
Drupal 5.x-4.11
Drupal 6.x-1.12
Drupal 7.x-1.x-dev
Exploit / POC
Drupal Print Module Security Bypass Vulnerability
An attacker can use a browser to exploit this issue.
An attacker can use a browser to exploit this issue.
Solution / Fix
Drupal Print Module Security Bypass Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
References
Drupal Print Module Security Bypass Vulnerability
References:
References:
- Drupal Language Switcher Dropdown Homepage (Drupal)
- Vulnerabilities in Print for Drupal (mustlive)