CVE-2009-4064

https://notcve.org/view.php?id=CVE-2009-4064

Cross-site scripting (XSS) vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via node titles. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Gallery Assist v6.x anteriores a la v6.x-1.7 de Drupal permite a usuarios remotos inyectar codigo de script web o código HTML a través de "node titles" (títulos de nodo). • http://drupal.org/node/636488 http://drupal.org/node/636660 http://osvdb.org/60270 http://secunia.com/advisories/37425 http://www.securityfocus.com/bid/37061 https://exchange.xforce.ibmcloud.com/vulnerabilities/54347 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •