CVE-2009-3479

CVE-2009-3479 documents an XSS vulnerability in the Drupal Bibliography (Biblio) module. Affected: Drupal Bibliography 5.x (before 5.x-1.17) and 6.x (before 6.x-1.6). The flaw allows remote attackers with the permission to create content displayed by the Bibliography module to inject arbitrary we...

CVE-2010-1358

The CVE-2010-1358 entry concerns Drupal’s Bibliography (Biblio) module. Affected versions are 5.x up to 5.x-1.17 and 6.x up to 6.x-1.9. The vulnerability is a cross-site scripting (XSS) issue that allows remote authenticated users who have the administer biblio privilege to inject arbitrary web s...

CVE-2010-2000

CVE-2010-2000 describes a cross-site scripting (XSS) vulnerability in Drupal’s Bibliography (Biblio) module affecting 5.x up to 5.x-1.17 and 6.x up to 6.x-1.9. The issue allows remote authenticated users possessing the “administer biblio” privilege to inject arbitrary web script or HTML via unspe...

CVE-2009-3488

CVE-2009-3488 describes a cross-site scripting (XSS) vulnerability in Drupal’s Bibliography (Biblio) module, version 6.x-1.6, where remote authenticated users with content-creation privileges can inject arbitrary scripts or HTML via the Title field. The connected records corroborate a related XSS...