CVE Vulnerabilities

CVE-2009-4526

Published: Dec 31, 2009 | Modified: Jan 04, 2010
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The Send by e-mail sub-module in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, does not properly enforce privilege requirements, which allows remote attackers to read page titles by requesting a Send to friend form.

Affected Software

Name Vendor Start Version End Version
Print Joao_ventura 5.x-4.0 5.x-4.0
Print Joao_ventura 5.x-4.1 5.x-4.1
Print Joao_ventura 5.x-4.2 5.x-4.2
Print Joao_ventura 5.x-4.3 5.x-4.3
Print Joao_ventura 5.x-4.4 5.x-4.4
Print Joao_ventura 5.x-4.5 5.x-4.5
Print Joao_ventura 5.x-4.6 5.x-4.6
Print Joao_ventura 5.x-4.7 5.x-4.7
Print Joao_ventura 5.x-4.8 5.x-4.8
Print Joao_ventura 5.x-4.x 5.x-4.x
Print Joao_ventura 6.x-1.0 6.x-1.0
Print Joao_ventura 6.x-1.0 6.x-1.0
Print Joao_ventura 6.x-1.0 6.x-1.0
Print Joao_ventura 6.x-1.0 6.x-1.0
Print Joao_ventura 6.x-1.0 6.x-1.0
Print Joao_ventura 6.x-1.0 6.x-1.0
Print Joao_ventura 6.x-1.0 6.x-1.0
Print Joao_ventura 6.x-1.0 6.x-1.0
Print Joao_ventura 6.x-1.1 6.x-1.1
Print Joao_ventura 6.x-1.2 6.x-1.2
Print Joao_ventura 6.x-1.3 6.x-1.3
Print Joao_ventura 6.x-1.4 6.x-1.4
Print Joao_ventura 6.x-1.5 6.x-1.5
Print Joao_ventura 6.x-1.6 6.x-1.6
Print Joao_ventura 6.x-1.7 6.x-1.7
Print Joao_ventura 6.x-1.x 6.x-1.x

References