Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are vulnerable to CVE-2011-4969, allows remote attackers to inject arbitrary web script or HTML via vectors involving unspecified Javascript functions that are used to select DOM elements.

The version of Drupal installed on the remote server is 7.x prior to 7.19, and is affected by the following vulnerabilities :

 - A flaw exists that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate certain unspecified input during DOM element selection. This may allow an attacker to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server. (CVE-2013-0244)
 - A flaw in the Printer Friendly Version book module may lead to unauthorized disclosure of potentially sensitive information from an arbitrary node. No further details have been provided. (CVE-2013-0245)
 - A flaw exists in the Image module due to the program failing to properly give permissions to derivative images. Under certain circumstances, a remote attacker can gain access to derivative images that do not inherit the permissions of the program. (CVE-2013-0246)

Multiple vulnerabilities have been been fixed in the Drupal content management framework, resulting in information disclosure, insufficient validation, cross-site scripting and cross-site request forgery.

The remote web server is running a version of Drupal that is 6.x prior to 6.28 or 7.x prior to 7.19. It is, therefore, potentially affected by multiple vulnerabilities :

  - A cross-site scripting (XSS) vulnerability exists due to     properly sanitized user-supplied input to certain Drupal     JavaScript functions when running older versions of     jQuery. A remote attacker can exploit this to inject     arbitrary HTML and script code into a user's browser to     be executed within the security context of the affected     site. (CVE-2013-0244)

  - An access bypass vulnerability exists in the Book module     (Printer Friendly Version) that allows an authenticated,     remote attacker to access the content of arbitrary     nodes. (CVE-2013-0245)

  - The Image module in version 7.x is affected by an access     bypass vulnerability that allows unauthorized access to     image derivatives. (CVE-2013-0246)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
9725	Drupal 7.x < 7.19 Multiple Vulnerabilities	Nessus Network Monitor	CGI		low
70401	Debian DSA-2776-1 : drupal6 - several vulnerabilities	Nessus	Debian Local Security Checks	Local	medium
63691	Drupal 6.x < 6.28 / 7.x < 7.19 Multiple Vulnerabilities	Nessus	CGI abuses	Remote	medium

Detections

Analytics

CVE-2013-0244

medium

Tenable Plugins

low

medium

medium