EUVD-2009-4013

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2009-4042

The CVE-2009-4042 entry describes a cross-site scripting (XSS) vulnerability in the Drupal RootCandy theme, versions 6.x prior to 6.x-1.5. The root cause is insufficient sanitization of the URI, allowing remote attackers to inject arbitrary web script or HTML. Affected software: RootCandy theme 6...

CVE-2009-4042

Cross-site scripting XSS vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI...