CVE ID:	CVE-2008-1385
Description:	Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
Test IDs:	1.3.6.1.4.1.25623.1.0.60885
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1385 BugTraq ID: 28885 http://www.securityfocus.com/bid/28885 Bugtraq: 20080422 Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)) (Google Search) http://www.securityfocus.com/archive/1/491176/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0590.html http://int21.de/cve/CVE-2008-1385-s9y.html http://www.securitytracker.com/id?1019915 http://secunia.com/advisories/29942 http://www.vupen.com/english/advisories/2008/1348/references XForce ISS Database: topreferrers-referer-xss(41965) https://exchange.xforce.ibmcloud.com/vulnerabilities/41965