EUVD-2014-9316

Malware in sbrugna...

CVE-2014-9499

The CVE-2014-9499 entry applies to the Drupal contributed module Godwin’s Law (Drupal 7.x, vulnerable up to 7.x-1.0). The underlying issue is an XSS in the Watchdog/dblog integration, allowing remote authenticated users to inject arbitrary web script or HTML via a Watchdog message. The exploitabl...