CVE-2008-6533: XSS
First published: Thu Mar 26 2009(Updated: )
Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly filtered and allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Drupal | =5.10 | |
| Drupal | =5.4 | |
| Drupal | =6.2 | |
| Drupal | =5.12 | |
| Drupal | =5.2 | |
| Drupal | =5.7 | |
| Drupal | =6.4 | |
| Drupal | =5.0 | |
| Drupal | =6.1 | |
| Drupal | =5.6 | |
| Drupal | =5.1 | |
| Drupal | =6.5 | |
| Drupal | =5.5 | |
| Drupal | =6.6 | |
| Drupal | =6.0 | |
| Drupal | =5.9 | |
| Drupal | =5.8 | |
| Drupal | =5.3 | |
| Drupal | =6.3 | |
| Drupal | =5.11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://drupal.org/node/345441
- http://secunia.com/advisories/33112
- http://www.osvdb.org/50662
- http://www.vupen.com/english/advisories/2008/3414
- http://secunia.com/advisories/33147
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00767.html
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00740.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47259
Frequently Asked Questions
What is the severity of CVE-2008-6533?
CVE-2008-6533 is considered a medium severity vulnerability due to its potential to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2008-6533?
To fix CVE-2008-6533, upgrade Drupal to versions 5.13 or later, or 6.7 or later.
Which versions of Drupal are affected by CVE-2008-6533?
CVE-2008-6533 affects Drupal versions 5.x prior to 5.13 and 6.x prior to 6.7.
What types of attacks are possible with CVE-2008-6533?
CVE-2008-6533 allows attackers to potentially conduct cross-site scripting (XSS) attacks through unspecified vectors.
Is my Drupal site vulnerable if I am using a version lower than 5.13 or 6.7 due to CVE-2008-6533?
Yes, if you are using Drupal versions lower than 5.13 or 6.7, your site is vulnerable to CVE-2008-6533.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/drupal
- canonical/drupal
- version/drupal/5.10
- version/drupal/5.4
- version/drupal/6.2
- version/drupal/5.12
- version/drupal/5.2
- version/drupal/5.7
- version/drupal/6.4
- version/drupal/5.0
- version/drupal/6.1
- version/drupal/5.6
- version/drupal/5.1
- version/drupal/6.5
- version/drupal/5.5
- version/drupal/6.6
- version/drupal/6.0
- version/drupal/5.9
- version/drupal/5.8
- version/drupal/5.3
- version/drupal/6.3
- version/drupal/5.11