CVE-2009-3919 | BDVDB-2026-39215 Detail

Description#

Cross-site scripting (XSS) vulnerability in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified "user-supplied information."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://drupal.org/node/623506
https://exchange.xforce.ibmcloud.com/vulnerabilities/54151
http://osvdb.org/59676
http://secunia.com/advisories/37287
http://drupal.org/node/623546
http://www.securityfocus.com/bid/36927

Exploit#

No public exploit known

History#

Version 12009-11-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.