1. CVE-Search
  2. CVE-2009-4534
ID CVE-2009-4534
Summary Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.0:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta1:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta1:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta2:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta2:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta3:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta3:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta4:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta4:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.1:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.2:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.3:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:5.x-1.x-dev:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:5.x-1.x-dev:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:6.x-1.0:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:6.x-1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:6.x-1.0-beta1:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:6.x-1.0-beta1:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:6.x-1.1:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:6.x-1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:6.x-1.2:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:6.x-1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:6.x-1.x-dev:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:6.x-1.x-dev:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:6.x-2.0-alpha1:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:6.x-2.0-alpha1:*:*:*:*:*:*:*
  • cpe:2.3:a:nanwich:faq_ask:*:*:*:*:*:*:*:*
    cpe:2.3:a:nanwich:faq_ask:*:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 04-01-2010 - 05:00)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 36877
confirm http://drupal.org/node/617444
Last major update 04-01-2010 - 05:00
Published 31-12-2009 - 19:30
Last modified 04-01-2010 - 05:00
Back to Top