EUVD-2009-3140

Malware in sbrugna...

CVE-2009-3157

Cross-site scripting XSS vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the title of a content type...

PT-2009-5473 · Drupal · Drupal Calendar Module

Name of the Vulnerable Software and Affected Versions: Drupal Calendar module version 6.x before 6.x-2.2 Description: A cross-site scripting XSS issue exists in the Calendar module for Drupal, allowing remote authenticated users with "create new content types" privileges to inject arbitrary web...