Description

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

Remediation

References

CVE-2006-2832

Related Vulnerabilities

Apache Tomcat Other Vulnerability (CVE-2002-1148)

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17294)

Apache HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-28615)

WordPress Plugin WP Private Message Insecure Direct Object Reference (1.0.5)

WordPress Plugin Multisite Plugin Manager Multiple Cross-Site Scripting Vulnerabilities (3.1.1)

Severity

Low

Tags

Missing Update Known Vulnerabilities CVE-2006-2832