NVD

Id
61517  
Name
CVE-2006-2832  
Description
Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-05  
Modified Date
2008-09-05  
Seq
2006-2832  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318195 61517 CVE-2006-2832 http://drupal.org/files/sa-2006-007/advisory.txt  View
318196 61517 CVE-2006-2832 http://drupal.org/node/66763  View
318197 61517 CVE-2006-2832 1042  View
318198 61517 CVE-2006-2832 DSA-1125  View
318199 61517 CVE-2006-2832 20060602 [DRUPAL-SA-2006-007] Drupal 4.6.8 / 4.7.2 fixes arbitrary file execution issue  View
318200 61517 CVE-2006-2832 18245  View

Related JVN