EUVD-2012-2690

Malware in sbrugna...

CVE-2012-2710

Cross-site scripting XSS vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal, when "Append the content title to the end of the breadcrumb" is enabled, allows remote attackers to inject arbitrary web script or HTML via the content title in a breadcrumb...

Cross site scripting

Cross-site scripting XSS vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal, when "Append the content title to the end of the breadcrumb" is enabled, allows remote attackers to inject arbitrary web script or HTML via the content title in a breadcrumb...

CVE-2012-2710

CVE-2012-2710 affects the Zen theme for Drupal (6.x-1.x) prior to 6.x-1.1. When the option “Append the content title to the end of the breadcrumb” is enabled, the breadcrumb can reflect the content title without sufficient filtering, allowing remote attackers to inject arbitrary script or HTML vi...

CVE-2012-2710

Cross-site scripting XSS vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal, when "Append the content title to the end of the breadcrumb" is enabled, allows remote attackers to inject arbitrary web script or HTML via the content title in a breadcrumb...