EUVD-2009-4032

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Agreement module 6.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4061

CVE-2009-4061 concerns multiple cross-site scripting (XSS) vulnerabilities in the Drupal Agreement module 6.x, prior to 6.x-1.2. The issues are exploitable via unspecified vectors and impact the web page content with injected script/HTML. The NVD entry lists a MEDIUM severity (CVSS v2: AV:N/AC:M/...

CVE-2009-4061

Multiple cross-site scripting XSS vulnerabilities in the Agreement module 6.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

SA-CONTRIB-2009-106 - Agreement - Cross Site Scripting

The Agreement module enables the display of a text-based agreement think "Terms of Service" that users of a particular role must accept before they are given access to the site. The module does not sanitize some of the user-supplied fields, leading to a Cross Site Scripting XSS vulnerability...