CVE Vulnerabilities

CVE-2006-5475

Published: Oct 24, 2006 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Multiple cross-site scripting (XSS) vulnerabilities in the XML parser in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allow remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.

Affected Software

Name Vendor Start Version End Version
Drupal Drupal 4.6.0 (including) 4.6.0 (including)
Drupal Drupal 4.6.1 (including) 4.6.1 (including)
Drupal Drupal 4.6.2 (including) 4.6.2 (including)
Drupal Drupal 4.6.3 (including) 4.6.3 (including)
Drupal Drupal 4.6.4 (including) 4.6.4 (including)
Drupal Drupal 4.6.5 (including) 4.6.5 (including)
Drupal Drupal 4.6.6 (including) 4.6.6 (including)
Drupal Drupal 4.6.7 (including) 4.6.7 (including)
Drupal Drupal 4.6.8 (including) 4.6.8 (including)
Drupal Drupal 4.6.9 (including) 4.6.9 (including)
Drupal Drupal 4.7.0 (including) 4.7.0 (including)
Drupal Drupal 4.7.1 (including) 4.7.1 (including)
Drupal Drupal 4.7.2 (including) 4.7.2 (including)
Drupal Drupal 4.7.3 (including) 4.7.3 (including)
Drupal Ubuntu dapper *
Drupal Ubuntu edgy *
Drupal Ubuntu feisty *

References