CVE

Id
20224  
CVE No.
CVE-2006-4120  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187523 20224 CVE-2006-4120 CONFIRM:http://drupal.org/node/77538  View
187524 20224 CVE-2006-4120 CONFIRM:http://drupal.org/node/77753  View
187525 20224 CVE-2006-4120 BID:19422  View
187526 20224 CVE-2006-4120 URL:http://www.securityfocus.com/bid/19422  View
187527 20224 CVE-2006-4120 VUPEN:ADV-2006-3202  View
187528 20224 CVE-2006-4120 URL:http://www.vupen.com/english/advisories/2006/3202  View
187529 20224 CVE-2006-4120 SECUNIA:21381  View
187530 20224 CVE-2006-4120 URL:http://secunia.com/advisories/21381  View
187531 20224 CVE-2006-4120 XF:recipe-unspecified-xss(28490)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60753 JVNDB-2006-003019 Simple one-file guestbook における認証を回避される脆弱性 Simple one-file guestbook には、認証を回避される、およびゲストブックのエントリを削除される脆弱性が存在します。 CVE-2006-4122 20224 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003019.html  View