EUVD-2013-1959

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file...

PT-2013-3497

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to inject arbitrary web script or HTML via the file name of an MP3 file in the MP3 Player module...