Lucene search
HistoryJul 13, 2006 - 1:05 a.m.
CVE-2006-3570
cve-2006-3570
xss vulnerability
drupal
webform module
nvd
security
web script
html
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
75.9%
Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8, 2006 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
drupaldrupalMatch4.6
ORdrupaldrupalMatch4.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| drupal:drupal | drupal | eq | 4.6 |
| drupal:drupal | drupal | eq | 4.7 |
Related
cvelist
cvelist
CVE-2006-3570
2006-07-13 01:00:00
ubuntucve
ubuntucve
CVE-2006-3570
2006-07-13 00:00:00
nvd
nvd
CVE-2006-3570
2006-07-13 01:05:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
75.9%
Related for CVE-2006-3570