CVE

Id
18937  
CVE No.
CVE-2006-2833  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web script or HTML via inputs that are not properly validated when the page title is output, possibly involving the $names variable.  
Phase
Assigned (20060605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
167433 18937 CVE-2006-2833 BUGTRAQ:20060602 [DRUPAL-SA-2006-008] Drupal 4.6.8 / 4.7.2 fixes XSS issue  View
167434 18937 CVE-2006-2833 URL:http://www.securityfocus.com/archive/1/archive/1/435793/100/0/threaded  View
167435 18937 CVE-2006-2833 CONFIRM:http://drupal.org/node/66767  View
167436 18937 CVE-2006-2833 CONFIRM:http://drupal.org/files/sa-2006-008/4.6.7.patch  View
167437 18937 CVE-2006-2833 DEBIAN:DSA-1125  View
167438 18937 CVE-2006-2833 URL:http://www.debian.org/security/2006/dsa-1125  View
167439 18937 CVE-2006-2833 BID:18245  View
167440 18937 CVE-2006-2833 URL:http://www.securityfocus.com/bid/18245  View
167441 18937 CVE-2006-2833 VUPEN:ADV-2006-2112  View
167442 18937 CVE-2006-2833 URL:http://www.vupen.com/english/advisories/2006/2112  View
167443 18937 CVE-2006-2833 SECUNIA:20412  View
167444 18937 CVE-2006-2833 URL:http://secunia.com/advisories/20412  View
167445 18937 CVE-2006-2833 SECUNIA:21244  View
167446 18937 CVE-2006-2833 URL:http://secunia.com/advisories/21244  View
167447 18937 CVE-2006-2833 SREASON:1041  View
167448 18937 CVE-2006-2833 URL:http://securityreason.com/securityalert/1041  View
167449 18937 CVE-2006-2833 XF:drupal-taxonomy-xss(26893)  View

Related JVN