All the vulnerabilites related to unleashedmind - img_assist
cve-2009-4558
Vulnerability from cvelistv5
Published
2010-01-04 21:00
Modified
2024-08-07 07:08
Severity ?
Summary
The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors.
References
http://drupal.org/node/520564x_refsource_CONFIRM
http://osvdb.org/55867vdb-entry, x_refsource_OSVDB
http://www.securityfocus.com/bid/35710vdb-entry, x_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/51787vdb-entry, x_refsource_XF
http://secunia.com/advisories/35879third-party-advisory, x_refsource_SECUNIA
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:08:37.939Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://drupal.org/node/520564"
          },
          {
            "name": "55867",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/55867"
          },
          {
            "name": "35710",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35710"
          },
          {
            "name": "imageassist-title-information-disclosure(51787)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787"
          },
          {
            "name": "35879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35879"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://drupal.org/node/520564"
        },
        {
          "name": "55867",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/55867"
        },
        {
          "name": "35710",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35710"
        },
        {
          "name": "imageassist-title-information-disclosure(51787)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787"
        },
        {
          "name": "35879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35879"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-4558",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://drupal.org/node/520564",
              "refsource": "CONFIRM",
              "url": "http://drupal.org/node/520564"
            },
            {
              "name": "55867",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/55867"
            },
            {
              "name": "35710",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35710"
            },
            {
              "name": "imageassist-title-information-disclosure(51787)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787"
            },
            {
              "name": "35879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35879"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-4558",
    "datePublished": "2010-01-04T21:00:00",
    "dateReserved": "2010-01-04T00:00:00",
    "dateUpdated": "2024-08-07T07:08:37.939Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-4557
Vulnerability from cvelistv5
Published
2010-01-04 21:00
Modified
2024-08-07 07:08
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, to inject arbitrary web script or HTML via a node title.
References
http://drupal.org/node/520564x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/51786vdb-entry, x_refsource_XF
http://www.securityfocus.com/bid/35710vdb-entry, x_refsource_BID
http://secunia.com/advisories/35879third-party-advisory, x_refsource_SECUNIA
http://osvdb.org/55866vdb-entry, x_refsource_OSVDB
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:08:37.952Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://drupal.org/node/520564"
          },
          {
            "name": "imageassist-node-title-xss(51786)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51786"
          },
          {
            "name": "35710",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35710"
          },
          {
            "name": "35879",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35879"
          },
          {
            "name": "55866",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/55866"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, to inject arbitrary web script or HTML via a node title."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://drupal.org/node/520564"
        },
        {
          "name": "imageassist-node-title-xss(51786)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51786"
        },
        {
          "name": "35710",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35710"
        },
        {
          "name": "35879",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35879"
        },
        {
          "name": "55866",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/55866"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-4557",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, to inject arbitrary web script or HTML via a node title."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://drupal.org/node/520564",
              "refsource": "CONFIRM",
              "url": "http://drupal.org/node/520564"
            },
            {
              "name": "imageassist-node-title-xss(51786)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51786"
            },
            {
              "name": "35710",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35710"
            },
            {
              "name": "35879",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35879"
            },
            {
              "name": "55866",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/55866"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-4557",
    "datePublished": "2010-01-04T21:00:00",
    "dateReserved": "2010-01-04T00:00:00",
    "dateUpdated": "2024-08-07T07:08:37.952Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd
Published
2010-01-04 21:30
Modified
2024-11-21 01:09
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, to inject arbitrary web script or HTML via a node title.
References
cve@mitre.orghttp://drupal.org/node/520564Patch, Vendor Advisory
cve@mitre.orghttp://osvdb.org/55866
cve@mitre.orghttp://secunia.com/advisories/35879Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/35710Patch
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/51786
af854a3a-2127-422b-91ae-364da2661108http://drupal.org/node/520564Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/55866
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35879Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/35710Patch
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/51786
Impacted products
Vendor Product Version
unleashedmind img_assist 5.x-1.0
unleashedmind img_assist 5.x-1.1
unleashedmind img_assist 5.x-1.2
unleashedmind img_assist 5.x-1.3
unleashedmind img_assist 5.x-1.4
unleashedmind img_assist 5.x-1.5
unleashedmind img_assist 5.x-1.6
unleashedmind img_assist 5.x-1.7
unleashedmind img_assist 5.x-1.x-dev
unleashedmind img_assist 5.x-2.0-alpha1
unleashedmind img_assist 5.x-2.0-alpha3
unleashedmind img_assist 5.x-2.x-dev
unleashedmind img_assist 5.x-3.x-dev
unleashedmind img_assist 6.x-1.0
unleashedmind img_assist 6.x-1.0-beta1
unleashedmind img_assist 6.x-1.x-dev
unleashedmind img_assist 6.x-2.0-alpha2
unleashedmind img_assist 6.x-2.0-alpha3
unleashedmind img_assist 6.x-2.x-dev
unleashedmind img_assist 6.x-3.x-dev
drupal drupal *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA586D8B-FA89-4880-AD95-472C604C8A41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0D361CB-2021-4FAF-ACB4-F3C7DFFB9309",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4CB7965-B4E6-42E8-8E49-16B9A764569B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1050F8C-FB50-42EB-8D0F-B7F2D3351A0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "13AB7445-036F-452B-AA29-9DE1EAB24312",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDAF3C12-B207-4397-97A8-30BF1CE99E46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2212E10-59C9-464B-A8EE-75D4A2EC1A12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "69D8A4FF-F45E-48EC-A266-C3970D5E0906",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEF261EE-6E9B-40B7-9FC9-098D48D8F9ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C8CA7DB-B44D-4D9C-A685-24D579B92F28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AEC6601-4359-4921-88C8-6F8C2AE749B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "72DB3A51-4F11-44BF-BBD6-D48CDABA4FD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-3.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "98EC230B-550B-4265-BEC4-54CD4F0E0725",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "499963D0-0409-4E1E-9EE7-A303C0D4A123",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.0-beta1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF997DA0-97C5-4FA8-AB98-7E1A3FBEFF3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FE5DE74-0819-41E1-AFDD-E9BE5115ACC4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha2:*:*:*:*:*:*:*",
              "matchCriteriaId": "144CC081-8855-4808-9AF3-CC80164DA00F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha3:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A19CC33-3306-46EA-A2E3-3A4678FB69B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5013EDA-D0E9-41F4-8687-E26B0125A2C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-3.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABFE72D5-38C6-4252-BBEE-5380A7EE7BD1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, to inject arbitrary web script or HTML via a node title."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el modulo Image Assist v5.x-1.x anterior a v5.x-1.8, v5.x-2.x anterior a v2.0-alpha4, v6.x-1.x anterior a v6.x-1.1, v6.x-2.x anterior a v2.0-alpha4, y v6.x-3.x-dev anterior a 2009-07-15 para Drupal permite a usuarios remotos autenticados con privilegios de creaci\u00f3n de nodos de imagen , inyectar secuencias de comandos web o HTML de forma arbitraria a trav\u00e9s del titulo del nodo."
    }
  ],
  "id": "CVE-2009-4557",
  "lastModified": "2024-11-21T01:09:54.850",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:S/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2010-01-04T21:30:00.437",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://drupal.org/node/520564"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/55866"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/35879"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/35710"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51786"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://drupal.org/node/520564"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/55866"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/35879"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/35710"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51786"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2010-01-04 21:30
Modified
2024-11-21 01:09
Severity ?
Summary
The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors.
References
cve@mitre.orghttp://drupal.org/node/520564Patch, Vendor Advisory
cve@mitre.orghttp://osvdb.org/55867
cve@mitre.orghttp://secunia.com/advisories/35879Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/35710Patch
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/51787
af854a3a-2127-422b-91ae-364da2661108http://drupal.org/node/520564Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/55867
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35879Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/35710Patch
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/51787
Impacted products
Vendor Product Version
unleashedmind img_assist 5.x-1.0
unleashedmind img_assist 5.x-1.1
unleashedmind img_assist 5.x-1.2
unleashedmind img_assist 5.x-1.3
unleashedmind img_assist 5.x-1.4
unleashedmind img_assist 5.x-1.5
unleashedmind img_assist 5.x-1.6
unleashedmind img_assist 5.x-1.7
unleashedmind img_assist 5.x-1.x-dev
unleashedmind img_assist 5.x-2.0-alpha1
unleashedmind img_assist 5.x-2.0-alpha3
unleashedmind img_assist 5.x-2.x-dev
unleashedmind img_assist 6.x-1.0
unleashedmind img_assist 6.x-1.0-beta1
unleashedmind img_assist 6.x-1.x-dev
unleashedmind img_assist 6.x-2.0-alpha2
unleashedmind img_assist 6.x-2.0-alpha3
unleashedmind img_assist 6.x-2.x-dev
unleashedmind img_assist 6.x-3.x-dev
drupal drupal *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA586D8B-FA89-4880-AD95-472C604C8A41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0D361CB-2021-4FAF-ACB4-F3C7DFFB9309",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4CB7965-B4E6-42E8-8E49-16B9A764569B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1050F8C-FB50-42EB-8D0F-B7F2D3351A0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "13AB7445-036F-452B-AA29-9DE1EAB24312",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDAF3C12-B207-4397-97A8-30BF1CE99E46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2212E10-59C9-464B-A8EE-75D4A2EC1A12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "69D8A4FF-F45E-48EC-A266-C3970D5E0906",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEF261EE-6E9B-40B7-9FC9-098D48D8F9ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C8CA7DB-B44D-4D9C-A685-24D579B92F28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AEC6601-4359-4921-88C8-6F8C2AE749B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "72DB3A51-4F11-44BF-BBD6-D48CDABA4FD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "499963D0-0409-4E1E-9EE7-A303C0D4A123",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.0-beta1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF997DA0-97C5-4FA8-AB98-7E1A3FBEFF3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FE5DE74-0819-41E1-AFDD-E9BE5115ACC4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha2:*:*:*:*:*:*:*",
              "matchCriteriaId": "144CC081-8855-4808-9AF3-CC80164DA00F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha3:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A19CC33-3306-46EA-A2E3-3A4678FB69B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5013EDA-D0E9-41F4-8687-E26B0125A2C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-3.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABFE72D5-38C6-4252-BBEE-5380A7EE7BD1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors."
    },
    {
      "lang": "es",
      "value": "El m\u00f3dulo Image Assist v5.x-1.x anterior a v5.x-1.8, v5.x-2.x  anterior a v2.0-alpha4, v6.x-1.x  anterior a v6.x-1.1, v6.x-2.x  anterior a v2.0-alpha4, y v6.x-3.x-dev  anterior a v2009-07-15, para Drupal, no refuerza adecuadamente los requisitos de algunos privilegios para p\u00e1ginas que no se han especificado, lo que permite a atacantes remotos leer el (1)t\u00edtulo (title) o (2)cuerpo (body) de un nodo de su elecci\u00f3n a trav\u00e9s de vectores no especificados."
    }
  ],
  "id": "CVE-2009-4558",
  "lastModified": "2024-11-21T01:09:54.997",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-01-04T21:30:00.467",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://drupal.org/node/520564"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/55867"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/35879"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/35710"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://drupal.org/node/520564"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/55867"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/35879"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/35710"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}