Unrated severityNVD Advisory· Published Oct 9, 2009· Updated Jun 16, 2026
CVE-2009-3651
CVE-2009-3651
Description
Cross-site scripting (XSS) vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:mikeryan:browscap:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:mikeryan:browscap:*:*:*:*:*:*:*:*range: <=5.x-1.0
- cpe:2.3:a:mikeryan:browscap:4.7.x-1.x-dev:*:*:*:*:*:*:*
- cpe:2.3:a:mikeryan:browscap:5.x-1.x-dev:*:*:*:*:*:*:*
- cpe:2.3:a:mikeryan:browscap:6.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mikeryan:browscap:6.x-1.x-dev:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- drupal.org/node/592262nvdPatchVendor Advisory
- drupal.org/node/592264nvdPatchVendor Advisory
- drupal.org/node/592272nvdPatchVendor Advisory
- osvdb.org/58444nvdPatch
- secunia.com/advisories/36912nvdVendor Advisory
- www.securityfocus.com/bid/36557nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/53571nvd
News mentions
0No linked articles in our index yet.