CVE-2009-3651

https://notcve.org/view.php?id=CVE-2009-3651

Cross-site scripting (XSS) vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header. Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la opción "Monitor Browsers" del módulo de Drupal "Browscap" antes de v5.x-1.1 y v6.x-1.1, permite a atacantes remotos inyectar HTML o scripts web a través de la cabecera HTTP User-Agent. • http://drupal.org/node/592262 http://drupal.org/node/592264 http://drupal.org/node/592272 http://osvdb.org/58444 http://secunia.com/advisories/36912 http://www.securityfocus.com/bid/36557 https://exchange.xforce.ibmcloud.com/vulnerabilities/53571 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •