CVE-2009-3917

CVE-2009-3917

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the S5 Presentation Player module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via an unspecified field that is copied to the HTML HEAD element.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://drupal.org/node/623508 http://osvdb.org/59678 http://secunia.com/advisories/37285 https://exchange.xforce.ibmcloud.com/vulnerabilities/54147 http://www.securityfocus.com/bid/36923