CVE Database
/

CVE-2006-3570

Back to search

CVE-2006-3570

Published: Jul 13, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8, 2006 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

VendorProductVersions

n/a

n/a

affected
n/a

References

21021
third-party-advisory
x_refsource_SECUNIA
18947
vdb-entry
x_refsource_BID
webform-unspecified-xss(27685)
vdb-entry
x_refsource_XF
ADV-2006-2764
vdb-entry
x_refsource_VUPEN
http://drupal.org/node/72846
x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now