NVD

Id
69611  
Name
CVE-2005-3973  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject arbitrary web script or HTML via various HTML tags and values, such as the (1) legend tag and the value parameter used in (2) label and (3) input tags, possibly due to an incomplete blacklist.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-12-03  
Modified Date
2011-03-07  
Seq
2005-3973  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359844 69611 CVE-2005-3973 http://drupal.org/files/sa-2005-007/4.6.3.patch  View
359845 69611 CVE-2005-3973 http://drupal.org/files/sa-2005-007/advisory.txt  View
359846 69611 CVE-2005-3973 DSA-958  View
359847 69611 CVE-2005-3973 20051201 [DRUPAL-SA-2005-007] Drupal 4.6.4 / 4.5.6 fixes XSS issue  View
359848 69611 CVE-2005-3973 15677  View
359849 69611 CVE-2005-3973 ADV-2005-2684  View

Related JVN