EUVD-2009-3626

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2009-3651

Cross-site scripting XSS vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2009-3651

CVE-2009-3651 is a cross-site scripting (XSS) vulnerability in the Browscap Drupal module’s Monitor browsers’ feature. The issue affects Browscap before versions 5.x-1.1 and 6.x-1.1, where an attacker can inject arbitrary script/HTML via the User-Agent header. The available documentation notes a ...