CVE

Id
15177  
CVE No.
CVE-2005-3973  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject arbitrary web script or HTML via various HTML tags and values, such as the (1) legend tag and the value parameter used in (2) label and (3) input tags, possibly due to an incomplete blacklist.  
Phase
Assigned (20051203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
118542 15177 CVE-2005-3973 BUGTRAQ:20051201 [DRUPAL-SA-2005-007] Drupal 4.6.4 / 4.5.6 fixes XSS issue  View
118543 15177 CVE-2005-3973 URL:http://www.securityfocus.com/archive/1/archive/1/418292/100/0/threaded  View
118544 15177 CVE-2005-3973 CONFIRM:http://drupal.org/files/sa-2005-007/advisory.txt  View
118545 15177 CVE-2005-3973 MISC:http://drupal.org/files/sa-2005-007/4.6.3.patch  View
118546 15177 CVE-2005-3973 DEBIAN:DSA-958  View
118547 15177 CVE-2005-3973 URL:http://www.debian.org/security/2006/dsa-958  View
118548 15177 CVE-2005-3973 BID:15677  View
118549 15177 CVE-2005-3973 URL:http://www.securityfocus.com/bid/15677  View
118550 15177 CVE-2005-3973 VUPEN:ADV-2005-2684  View
118551 15177 CVE-2005-3973 URL:http://www.vupen.com/english/advisories/2005/2684  View
118552 15177 CVE-2005-3973 SECUNIA:17824  View
118553 15177 CVE-2005-3973 URL:http://secunia.com/advisories/17824  View
118554 15177 CVE-2005-3973 SECUNIA:18630  View

Related JVN