CVE-2009-3435

Cross-site scripting (XSS) vulnerability in the variable editor in the Devel module 5.x before 5.x-1.2 and 6.x before 6.x-1.18, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a variable name.

• CWE-79

• http://drupal.org/node/585952Patch, Vendor Advisory
• http://osvdb.org/58313
• http://secunia.com/advisories/36859Vendor Advisory
• http://www.securityfocus.com/bid/36508Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53449
• http://drupal.org/node/585952Patch, Vendor Advisory
• http://osvdb.org/58313
• http://secunia.com/advisories/36859Vendor Advisory
• http://www.securityfocus.com/bid/36508Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53449

Published

Sep 28, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3429Stack-based buffer overflow in Pirate Radio Destiny Media Pl…
• CVE-2009-3430SQL injection vulnerability in login.php in Allomani Mobile …
• CVE-2009-3431Stack consumption vulnerability in Adobe Reader and Acrobat …
• CVE-2009-3432Unspecified vulnerability in xscreensaver in Sun Solaris 10,…
• CVE-2009-3433Unspecified vulnerability in clsetup in the configuration ut…
• CVE-2009-3434SQL injection vulnerability in the Tupinambis (com_tupinambi…
• CVE-2009-3436Multiple SQL injection vulnerabilities in forum.asp in MaxWe…
• CVE-2009-3437Cross-site scripting (XSS) vulnerability in the live preview…
• CVE-2009-3438SQL injection vulnerability in the JoomlaFacebook (com_faceb…
• CVE-2009-3439Multiple SQL injection vulnerabilities in Open Source Securi…
• CVE-2009-3440Cross-site scripting (XSS) vulnerability in Open Source Secu…
• CVE-2009-3441Open Source Security Information Management (OSSIM) before 2…