Description

Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8, 2006 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2006-3570

Related Vulnerabilities

WordPress Plugin Cms Pack TimThumb Arbitrary File Upload (1.3)

WordPress Plugin Woocommerce CSV importer Unspecified Vulnerability (3.4.0)

TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1010091)

Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-4222)

Oracle Database Server CVE-2014-6455 Vulnerability (CVE-2014-6455)

Severity

Medium

Classification

CVE-2006-3570

Tags

Missing Update Known Vulnerabilities