Lucene search
PRIOn knowledge basePRION:CVE-2006-2833HistoryJun 06, 2006 - 12:02 a.m.
Cross site scripting
2006-06-0600:02:00
PRIOn knowledge base
www.prio-n.com
3
Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web script or HTML via inputs that are not properly validated when the page title is output, possibly involving the $names variable.
References
secunia.com/advisories/20412
secunia.com/advisories/21244
securityreason.com/securityalert/1041
www.debian.org/security/2006/dsa-1125
www.securityfocus.com/archive/1/435793/100/0/threaded
www.securityfocus.com/bid/18245
www.vupen.com/english/advisories/2006/2112
drupal.org/files/sa-2006-008/4.6.7.patch
drupal.org/node/66767
exchange.xforce.ibmcloud.com/vulnerabilities/26893
Related
cve
cve
CVE-2006-2833
2006-06-06 00:02:00
openvas
openvas
FreeBSD Ports: drupal
2008-09-04 00:00:00
FreeBSD Ports: drupal
2008-09-04 00:00:00
Debian: Security Advisory (DSA-1125)
2008-01-17 00:00:00
freebsd
freebsd
drupal -- multiple vulnerabilities
2006-05-18 00:00:00
nessus
nessus
FreeBSD : drupal -- multiple vulnerabilities (6da7344b-128a-11db-b25f-00e00c69a70d)
2006-07-17 00:00:00
Debian DSA-1125-2 : drupal - several vulnerabilities
2006-10-14 00:00:00
nvd
nvd
CVE-2006-2833
2006-06-06 00:02:00
ubuntucve
ubuntucve
CVE-2006-2833
2006-06-06 00:00:00
cvelist
cvelist
CVE-2006-2833
2006-06-06 00:00:00
osv
osv
drupal - several
2006-07-27 00:00:00
debian
debian