CVE:CVE-2009-3651
CNNVD:CNNVD-200910-173
Drupal Browscap 5.x-1.1版本和6.x-1.1版本的之前版本的"监视浏览器的特征"中存在跨站脚本攻击漏洞。远程攻击者可以借助User-Agent HTTP页眉，注入任意web或HTML。
solution:Upgrade mikeryan browscap to a higher version than 5.x-1.0,4.7.x-1.x-dev,5.x-1.x-dev,6.x-1.0,6.x-1.x-dev,and avoid the version (,5.x-1.0],4.7.x-1.x-dev,5.x-1.x-dev,6.x-1.0,6.x-1.x-dev