CVE ID:	CVE-2009-1575
Description:	Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7.
Test IDs:	1.3.6.1.4.1.25623.1.0.63957
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1575 Debian Security Information: DSA-1792 (Google Search) http://www.debian.org/security/2009/dsa-1792 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html http://www.osvdb.org/54152 http://secunia.com/advisories/34948 http://secunia.com/advisories/34950 http://secunia.com/advisories/34980 http://www.vupen.com/english/advisories/2009/1216 XForce ISS Database: drupal-utf7-xss(50250) https://exchange.xforce.ibmcloud.com/vulnerabilities/50250