EUVD-2012-1644

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in videofilter.codecs.inc in the Video Filter module 6.x-2.x and 7.x-2.x for Drupal allows remote attackers to inject arbitrary web script or HTML via the EMBEDLOOKUP parameter for Blip.tv links...

CVE-2012-1634: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in videofilter.codecs.inc in the Video Filter module 6.x-2.x and 7.x-2.x for Drupal allows remote attackers to inject arbitrary web script or HTML via the EMBEDLOOKUP parameter for Blip.tv links...

PT-2012-3399

Name of the Vulnerable Software and Affected Versions Drupal Video Filter module versions 6.x-2.x through 7.x-2.x Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the EMBEDLOOKUP parameter for Blip.tv links in...