CVE-2009-3918: XSS
Published Nov 9, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title.
Affected Software
11 affected components
Drupal Drupal
Karim Ratib Zoomify=5.x-1.0
Karim Ratib Zoomify=5.x-1.x-dev
Karim Ratib Zoomify=5.x-2.0
Karim Ratib Zoomify=5.x-2.1
Karim Ratib Zoomify=5.x-2.x-dev
Karim Ratib Zoomify=6.x-1.0
Karim Ratib Zoomify=6.x-1.1
Karim Ratib Zoomify=6.x-1.2
Karim Ratib Zoomify=6.x-1.3
Karim Ratib Zoomify=6.x-1.x-dev
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Nov 9, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-3918?
CVE-2009-3918 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2009-3918?
To fix CVE-2009-3918, upgrade the Zoomify module to version 5.x-2.2 or 6.x-1.4 or later.
3
What systems are affected by CVE-2009-3918?
CVE-2009-3918 affects the Zoomify module versions prior to 5.x-2.2 and 6.x-1.4 for Drupal.
4
What type of vulnerability is CVE-2009-3918?
CVE-2009-3918 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary scripts or HTML.
5
Who is vulnerable to CVE-2009-3918?
Websites using vulnerable versions of the Zoomify module in Drupal are at risk from CVE-2009-3918.