CVE-2009-0603: XSS
Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter (aka the Help field). NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0603?
CVE-2009-0603 is classified as a moderate severity vulnerability due to its potential for XSS attacks.
How do I fix CVE-2009-0603?
To fix CVE-2009-0603, upgrade the Link module to the latest version or apply supplied patches that mitigate the XSS vulnerability.
Who is affected by CVE-2009-0603?
Remote authenticated users with 'administer content types' privileges on Drupal 5.10 are affected by CVE-2009-0603.
What type of attack does CVE-2009-0603 facilitate?
CVE-2009-0603 facilitates cross-site scripting (XSS) attacks by allowing script injection via the description parameter.
Is Drupal core affected by CVE-2009-0603?
No, the Drupal core is not affected by CVE-2009-0603; the vulnerability is limited to the Link module version 5.x-2.5.