Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-0818

EPSS 0.22% · P44
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0818

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function (taxonomy_theme_admin.inc) in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the "administer taxonomy" permission, or the ability to create pages when tagging is enabled, to inject arbitrary web script or HTML via the Vocabulary name (name parameter) to index.php. NOTE: some of these details are obtained from third party information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Drupal Taxonomy Theme模块name参数HTML注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Drupal的Taxonomy Theme模块允许网站管理员基于分类、词汇或类型内容更改指定内容的主题。 Taxonomy Theme模块的taxonomy_theme_admin_table_builder()函数没有正确地检查用户提供输入。 在taxonomy_theme_admin.inc的388行： $form['table'][$item->$data['key']]['title'] = array('#value' => $item->name); 由于没有使用check_plain()或类
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-0818

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0818

Please Login to view more intelligence information

Same Patch Batch · n/a · 2009-03-05 · 32 CVEs total

CVE-2009-0619Cisco SBC拒绝服务漏洞
CVE-2009-0821Mozilla Firefox Nested 'window.print()' 拒绝服务漏洞
CVE-2009-0820Php.Brickhost phpScheduleIt 'check.php'远程代码执行漏洞
CVE-2009-0819Oracle MySQL 安全漏洞
CVE-2009-0817Drupal Protected Node模块脚本注入漏洞
CVE-2009-0816TYPO3后台用户界面跨站脚本攻击漏洞
CVE-2009-0815TYPO3 class.tslib_fe.php jumpUrl机制信息泄露漏洞
CVE-2009-0814Blogsa 'Widgets.aspx' 跨站脚本攻击漏洞
CVE-2009-0813Imera ImeraIEPlugin ActiveX控件任意文件下载漏洞
CVE-2009-0777Mozilla Firefox/Thunderbird/SeaMonkey地址欺骗漏洞
CVE-2009-0776Mozilla Firefox/Thunderbird/SeaMonkey 'nsIRDFService'安全绕过和信息泄露漏洞
CVE-2009-0775Mozilla Firefox安全漏洞
CVE-2009-0774Mozilla多个产品'布局引擎' 拒绝服务攻击和代码执行漏洞
CVE-2009-0773Mozilla多个产品 'JavaScript引擎' 拒绝服务和任意代码执行漏洞
CVE-2009-0772Mozilla多个产品布局引擎拒绝服务和任意代码执行漏洞
CVE-2009-0771Mozilla Firefox 资源管理错误漏洞
CVE-2008-6399DotNetNuke 权限许可和访问控制漏洞
CVE-2009-0578Ubuntu GNOME NetworkManager 'dbus' 错误权限限制漏洞
CVE-2009-0367Wesnoth Battle for Wesnoth PythonAI模块绕过安全限制漏洞
CVE-2009-0365Ubuntu GNOME NetworkManager 'nm-applet.conf' 错误权限限制漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-0818

No comments yet

Leave a comment