EUVD-2008-6383

Malware in sbrugna...

CVE-2008-6413

Cross-site scripting XSS vulnerability in the Answers module 5.x-1.x-dev and possibly other 5.x versions, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a Simple Answer to a question...

CVE-2008-6413

CVE-2008-6413 describes a Cross-site Scripting (XSS) vulnerability in the Drupal Answers module (5.x-1.x-dev and possibly other 5.x versions). The issue allows remote attackers to inject arbitrary web script or HTML via a Simple Answer to a question. The provided documents do not specify affected...

SA-2008-053 - Answers - Cross site scripting

The Answers module allows a site owner to add a Questions & Answer section to the site. Unfortunately, the module does not properly escape text, which allows malicious users who are able to post answers to insert arbitrary HTML and scripts into a page. Wikipedia has more information about such...