FKIE_CVE-2009-1823

Vulnerability from fkie_nvd - Published: 2009-05-29 16:30 - Updated: 2026-06-16 23:08
Severity
Summary
Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to contain crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, a related issue to CVE-2009-1575.
References
cve@mitre.orghttp://drupal.org/node/461674Patch, Vendor Advisory
cve@mitre.orghttp://osvdb.org/54427
cve@mitre.orghttp://secunia.com/advisories/35040Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/34954
cve@mitre.orghttp://www.vupen.com/english/advisories/2009/1320Patch, Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/50523
af854a3a-2127-422b-91ae-364da2661108http://drupal.org/node/461674Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/54427
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35040Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/34954
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/1320Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/50523
Impacted products
Vendor Product Version
drupal drupal *
drupal print 5.x
drupal print 5.x-1.0
drupal print 5.x-1.1
drupal print 5.x-1.2
drupal print 5.x-1.x-dev
drupal print 5.x-2.1
drupal print 5.x-2.2
drupal print 5.x-2.x-dev
drupal print 5.x-3.0
drupal print 5.x-3.1
drupal print 5.x-3.2
drupal print 5.x-3.3
drupal print 5.x-3.4
drupal print 5.x-3.5
drupal print 5.x-3.6
drupal print 5.x-3.7
drupal print 5.x-4.0
drupal print 5.x-4.1
drupal print 5.x-4.2
drupal print 5.x-4.3
drupal print 5.x-4.4
drupal print 5.x-4.5
drupal print 5.x-4.6
drupal print 6.x-1.0
drupal print 6.x-1.0-rc3
drupal print 6.x-1.0-rc4
drupal print 6.x-1.0-rc5
drupal print 6.x-1.0-rc8
drupal print 6.x-1.0-rc9
drupal print 6.x-1.1
drupal print 6.x-1.2
drupal print 6.x-1.3
drupal print 6.x-1.4
drupal print 6.x-1.5
drupal print 6.x-1.6
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*",
              "matchCriteriaId": "13532942-BC0A-4B25-9FE3-679E5A698F2F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B1DFE95-5788-4C00-8D24-FD2068352293",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A35122AE-7CAB-4AB1-88E7-EAF882618E33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD3428DA-1459-4B1F-A19B-C66F8FB75BC4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "9ABFF4E5-8F49-4AC4-8CEB-F502E6882087",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA7EF9D6-39D2-4922-B516-44B31E38DB32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "030BC1EE-8ED5-4955-AD4B-1745690ABB9B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*",
              "matchCriteriaId": "989C2B4B-2CAA-4F85-899B-2E85C7C1AD39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F18D750A-6F98-4A72-B040-9A448EC007BE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5029B78B-0160-4547-9934-19A891AB2652",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE82C4B9-F7F2-424F-9AF9-9D945FD563EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C88506DA-94A1-4559-BCD8-D6DA9D438AF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B0A448C-470C-4AA9-BAB5-8EAC14A6141E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D315DA5E-3012-4F25-8C7D-21C2BA172A13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "961AEFF7-499F-4709-BB2F-BB623A4CE19F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7267D96A-43CC-418B-B115-DE77154BCDAE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9302C93E-C85F-4EA3-8BE2-3575592B50B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "03EC0689-1246-4E34-948B-6380BB2BAC90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "746A3749-36A4-49EA-B705-922B9D260CBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2ECD6FD0-0A42-4445-9524-DE02E568FF98",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DCB040D-45EC-4E44-8D66-4C796247EBB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:5.x-4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED8F5659-A54C-4956-A7F0-6DF982CC7CC3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F41A6973-2C38-418D-A16F-93F77F902206",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D6DF7D4-0992-4677-BA0A-860F329E6D54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E8A1B8F-021C-4558-880F-9E7FCFE2D323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF939A54-5458-4FD5-916D-301CD3B57F35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FF7248F-2CD2-4551-AD81-3207FE1D45A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD956162-E836-4777-8346-DF6DAA100A81",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "82398A3C-DB58-42DE-BC16-56D92FAB55B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "33406F84-81BF-492E-9C22-171311E519A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BB084C5-BE56-4128-8A5D-8F536B276A14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F6B609E-4AD4-46CD-B9C7-5D0690B83326",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EFCA9EB-0A08-4FC2-BF40-DA3BD154DEAE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:print:6.x-1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8244420-574B-48C0-A714-F122A0788170",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to contain crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, a related issue to CVE-2009-1575."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el m\u00f3dulo Print (tambi\u00e9n conocido como versiones Printer, e-mail y PDF) v5.x anteriores a v5.x-4.7 y v6.x anteriores a v6.x-1.7, un m\u00f3dulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n modificando la cabecera de un documento, antes del elemento Content-Type META, contiene secuencias UTF-8 byte manipuladas que se tratan como UTF-7 en Internet Explorer 6 and 7, un caso relacionado con CVE-2009-1575."
    }
  ],
  "id": "CVE-2009-1823",
  "lastModified": "2026-06-16T23:08:07.660",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.6,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2009-05-29T16:30:00.517",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://drupal.org/node/461674"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/54427"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/35040"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/34954"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/1320"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50523"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://drupal.org/node/461674"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/54427"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/35040"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/34954"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/1320"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50523"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.