CVE-2009-4526
31.12.2009, 19:30
The Send by e-mail sub-module in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, does not properly enforce privilege requirements, which allows remote attackers to read page titles by requesting a "Send to friend" form.Enginsight
| Vendor | Product | Version |
|---|---|---|
| joao_ventura | 5.x-4.0:x | |
| joao_ventura | 5.x-4.1:x | |
| joao_ventura | 5.x-4.2:x | |
| joao_ventura | 5.x-4.3:x | |
| joao_ventura | 5.x-4.4:x | |
| joao_ventura | 5.x-4.5:x | |
| joao_ventura | 5.x-4.6:x | |
| joao_ventura | 5.x-4.7:x | |
| joao_ventura | 5.x-4.8:x | |
| joao_ventura | 5.x-4.x:x | |
| joao_ventura | 6.x-1.0:x | |
| joao_ventura | 6.x-1.0:x | |
| joao_ventura | 6.x-1.0:x | |
| joao_ventura | 6.x-1.0:x | |
| joao_ventura | 6.x-1.0:x | |
| joao_ventura | 6.x-1.0:x | |
| joao_ventura | 6.x-1.0:x | |
| joao_ventura | 6.x-1.0:x | |
| joao_ventura | 6.x-1.1:x | |
| joao_ventura | 6.x-1.2:x | |
| joao_ventura | 6.x-1.3:x | |
| joao_ventura | 6.x-1.4:x | |
| joao_ventura | 6.x-1.5:x | |
| joao_ventura | 6.x-1.6:x | |
| joao_ventura | 6.x-1.7:x | |
| joao_ventura | 6.x-1.x:x |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References