EUVD-2009-3885

Malware in sbrugna...

CVE-2009-3914

The CVE-2009-3914 entry concerns Drupal’s Temporary Invitation module (5.x) with versions before 5.x-2.3. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the Name field in an invitation. Impact is partial integrity of affecte...