EUVD-2012-2291

Malware in sbrugna...

CVE-2012-2298

Multiple cross-site scripting XSS vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 "user names in page titles" and 2 "autocomplete callbacks."...

CVE-2012-2298

Multiple cross-site scripting XSS vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 "user names in page titles" and 2 "autocomplete callbacks."...

CVE-2012-2298: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 "user names in page titles" and 2 "autocomplete callbacks."...

PT-2012-3932

Name of the Vulnerable Software and Affected Versions Drupal RealName module versions 6.x-1.x before 6.x-1.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to 1 user names in page titles and 2 autocomplete callbacks, specifically in the...