CVE-2009-3648

Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.

CVSS v2.0 3.5 LOW

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.madirish.net/?article=251	Exploit Patch
http://www.securityfocus.com/bid/36584
https://exchange.xforce.ibmcloud.com/vulnerabilities/53633

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:apsivam:service_links:6.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-10-09 14:30

Updated : 2017-08-17 01:31

NVD link : CVE-2009-3648

Mitre link : CVE-2009-3648

CVE.ORG link : CVE-2009-3648

JSON object : View

Products Affected

apsivam

service_links

drupal

drupal

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2009-3648", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-10-09T14:30:00.420", "references": [{"url": "http://www.madirish.net/?article=251", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/36584", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53633", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names."}, {"lang": "es", "value": "Una vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en el m\u00f3dulo de Drupal \"Service Links\" v6.x-1.0, permite inyectar HTML o scripts we aleatorios a usuarios remotos autenticados, con permisos para \"administrar tipos de contenido \", a trav\u00e9s de vectores no especificados cuando se muestran los nombres de tipo de contenido."}], "lastModified": "2017-08-17T01:31:13.477", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apsivam:service_links:6.x-1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DF61CB4-6946-493A-AB36-BF7DBBBE08BF"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Per: http://www.madirish.net/?article=251\r\n\r\n\r\nPatch\r\n\r\nApplying the following patch mitigates these threats.\r\n\r\n--- service_links/service_links.module\t2008-02-26 12:01:27.000000000 -0500\r\n+++ service_links/service_links.module\t2009-10-02 06:33:21.000000000 -0400\r\n@@ -35,11 +35,12 @@ function service_links_admin_settings() \r\n '#title' => t('Where to show the service links'),\r\n '#description' => t('Set the node types and categories you want to display links for.'),\r\n );\r\n+ $names = array_map('filter_xss', node_get_types('names'));\r\n $form['where_to_show_the_links']['service_links_node_types'] = array(\r\n '#type' => 'checkboxes',\r\n '#title' => t('Node types'),\r\n '#default_value' => variable_get('service_links_node_types', array()),\r\n- '#options' => node_get_types('names'),\r\n+ '#options' => $names,\r\n );\r\n if (module_exists('taxonomy')) {\r\n $form['where_to_show_the_links']['service_links_category_types'] = array(\r\n"}