CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1575

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 71.6%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2009-1575

Drupal » Drupal » Version: 5.0

cpe:2.3:a:drupal:drupal:5.0
Drupal » Drupal » Version: 5.1

cpe:2.3:a:drupal:drupal:5.1
Drupal » Drupal » Version: 5.10

cpe:2.3:a:drupal:drupal:5.10
Drupal » Drupal » Version: 5.11

cpe:2.3:a:drupal:drupal:5.11
Drupal » Drupal » Version: 5.12

cpe:2.3:a:drupal:drupal:5.12
Drupal » Drupal » Version: 5.13

cpe:2.3:a:drupal:drupal:5.13
Drupal » Drupal » Version: 5.14

cpe:2.3:a:drupal:drupal:5.14
Drupal » Drupal » Version: 5.15

cpe:2.3:a:drupal:drupal:5.15
Drupal » Drupal » Version: 5.16

cpe:2.3:a:drupal:drupal:5.16
Drupal » Drupal » Version: 5.1_rev1.1

cpe:2.3:a:drupal:drupal:5.1_rev1.1
Drupal » Drupal » Version: 5.2

cpe:2.3:a:drupal:drupal:5.2
Drupal » Drupal » Version: 5.3

cpe:2.3:a:drupal:drupal:5.3
Drupal » Drupal » Version: 5.4

cpe:2.3:a:drupal:drupal:5.4
Drupal » Drupal » Version: 5.5

cpe:2.3:a:drupal:drupal:5.5
Drupal » Drupal » Version: 5.5.

cpe:2.3:a:drupal:drupal:5.5.
Drupal » Drupal » Version: 5.6

cpe:2.3:a:drupal:drupal:5.6
Drupal » Drupal » Version: 5.7

cpe:2.3:a:drupal:drupal:5.7
Drupal » Drupal » Version: 5.8

cpe:2.3:a:drupal:drupal:5.8
Drupal » Drupal » Version: 5.9

cpe:2.3:a:drupal:drupal:5.9
Drupal » Drupal » Version: 6

cpe:2.3:a:drupal:drupal:6
Drupal » Drupal » Version: 6.0

cpe:2.3:a:drupal:drupal:6.0
Drupal » Drupal » Version: 6.1

cpe:2.3:a:drupal:drupal:6.1
Drupal » Drupal » Version: 6.10

cpe:2.3:a:drupal:drupal:6.10
Drupal » Drupal » Version: 6.2

cpe:2.3:a:drupal:drupal:6.2
Drupal » Drupal » Version: 6.3

cpe:2.3:a:drupal:drupal:6.3
Drupal » Drupal » Version: 6.4

cpe:2.3:a:drupal:drupal:6.4
Drupal » Drupal » Version: 6.5

cpe:2.3:a:drupal:drupal:6.5
Drupal » Drupal » Version: 6.6

cpe:2.3:a:drupal:drupal:6.6
Drupal » Drupal » Version: 6.7

cpe:2.3:a:drupal:drupal:6.7
Drupal » Drupal » Version: 6.8

cpe:2.3:a:drupal:drupal:6.8
Drupal » Drupal » Version: 6.9

cpe:2.3:a:drupal:drupal:6.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1575

Products

Pricing

Contact Us