CVE

Id
20750  
CVE No.
CVE-2006-4646  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Pathauto module before pathauto_node.inc 1.17.2.1 and the Drupal 4.6 Pathauto module before pathauto_node.inc 1.14.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196118 20750 CVE-2006-4646 CONFIRM:http://drupal.org/node/82527  View
196119 20750 CVE-2006-4646 BID:19876  View
196120 20750 CVE-2006-4646 URL:http://www.securityfocus.com/bid/19876  View
196121 20750 CVE-2006-4646 VUPEN:ADV-2006-3480  View
196122 20750 CVE-2006-4646 URL:http://www.vupen.com/english/advisories/2006/3480  View
196123 20750 CVE-2006-4646 SECUNIA:21779  View
196124 20750 CVE-2006-4646 URL:http://secunia.com/advisories/21779  View
196125 20750 CVE-2006-4646 XF:pathauto-drupal-unspecified-xss(28771)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58951 JVNDB-2006-001217 BP News の bp_ncom.php における PHP リモートファイルインクルージョンの脆弱性 BinGo News (BP News) の bp_ncom.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4648 20750 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001217.html  View