4.3

CVE-2006-1226

Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version4.5.0
Drupal ≫ Drupal Version4.5.1
Drupal ≫ Drupal Version4.5.2
Drupal ≫ Drupal Version4.5.3
Drupal ≫ Drupal Version4.6.0
Drupal ≫ Drupal Version4.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.71% 0.744
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/19245
Patch
Vendor Advisory
http://secunia.com/advisories/19257
http://www.debian.org/security/2006/dsa-1007
http://www.securityfocus.com/bid/17104
http://drupal.org/node/53803
Patch
Vendor Advisory
http://securityreason.com/securityalert/581
http://www.osvdb.org/23910
http://www.securityfocus.com/archive/1/427588/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/25202