Description

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title.

Remediation

References

CVE-2008-6170

Related Vulnerabilities

phpMyAdmin Other Vulnerability (CVE-2005-3299)

WordPress Plugin Check & Log Email Cross-Site Scripting (0.3)

Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-47828)

Oracle Database Server CVE-2009-3414 Vulnerability (CVE-2009-3414)

MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-45371)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2008-6170