Description

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

Remediation

References

CVE-2006-2832

Related Vulnerabilities

SharePoint Use After Free Vulnerability (CVE-2025-59221)

WordPress Plugin SEO Ultimate 'wp-admin/post.php' Cross-Site Scripting (6.9.1)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.11.1)

WordPress Plugin Question and Answer Forum 'title' Variable Cross-Site Scripting (1.2.4)

Apache Tomcat Improper Input Validation Vulnerability (CVE-2011-2526)

Severity

Low

Tags

Missing Update Known Vulnerabilities CVE-2006-2832