Description

Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8, 2006 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2006-3570

Related Vulnerabilities

MySQL CVE-2019-2969 Vulnerability (CVE-2019-2969)

MySQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-0375)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1734)

Perl Other Vulnerability (CVE-2009-3626)

MediaWiki Missing Authorization Vulnerability (CVE-2021-30155)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-3570