5.x.1.11

DATE	CVE	VULNERABILITY TITLE	RISK
2010-05-20	CVE-2010-2000	Cross-Site Scripting vulnerability in RON Jerome Bibliography Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1358. network high complexity ron-jerome drupal CWE-79	2.1
2009-09-30	CVE-2009-3479	Cross-Site Scripting vulnerability in multiple products Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title. network drupal ron-jerome CWE-79	4.3