QwikSec

Security Database

CVE

CWE

Training

CVE-2009-2079

Published: Jun 16, 2009

Modified: Sep 17, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via (1) vocabulary names, (2) synonyms, and (3) term names.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://drupal.org/node/487602

x_refsource_CONFIRM

http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability

x_refsource_MISC

http://drupal.org/node/487620

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

http://drupal.org/node/487818

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.