NVD

Id
64932  
Name
CVE-2006-6386  
Description
Cross-site scripting (XSS) vulnerability in the CVS management/tracker 4.7.x-1.0, 4.7.x-2.0, and 4.7.0 (before the 20060807 contribution release system) for Drupal allows remote attackers to inject arbitrary web script or HTML via the motivation field in the CVS application page, which is not passed through check_markup on display.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-07  
Modified Date
2011-03-07  
Seq
2006-6386  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339046 64932 CVE-2006-6386 http://drupal.org/node/101540  View
339047 64932 CVE-2006-6386 21455  View
339048 64932 CVE-2006-6386 ADV-2006-4870  View
339049 64932 CVE-2006-6386 drupalcvs-motivation-xss(30748)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59443 JVNDB-2006-001709 Drupal 用の CVS management/tracker におけるクロスサイトスクリプティングの脆弱性 Drupal 用の CVS management/tracker には、ディスプレイ上の check_markup に受け渡ししない不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-6386 22488 CVE-2006-6386 64932 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001709.html 2006-12-05 2012-06-26 View