Drupal Other Vulnerability (CVE-2006-2832)

Description

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

Remediation

References

CVE-2006-2832

Related Vulnerabilities

Zope Web Application Server Other Vulnerability (CVE-2000-1212)

WordPress Plugin Bulk Delete Users by Email Cross-Site Request Forgery (1.0)

WordPress 3.9.x Cross-Site Request Forgery (3.9 - 3.9.26)

WordPress Plugin DukaPress SQL Injection (2.5.9)

Claroline Other Vulnerability (CVE-2006-2868)

Severity

Low

Classification