CVE-2006-2260 - Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors

Published May 9, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.21%

Description

Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://drupal.org/node/62406
x_refsource_CONFIRMPatch
http://secunia.com/advisories/19997
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/17885
vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/1697
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2261
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26358
vdb-entryx_refsource_XF

Link	Providers	Tags
http://drupal.org/node/62406		x_refsource_CONFIRMPatch
http://secunia.com/advisories/19997		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/17885		vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/1697		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2261		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26358		vdb-entryx_refsource_XF