CVE-2006-4109 - Cross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Published Aug 14, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.18%

Description

Cross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://drupal.org/node/77756
x_refsource_CONFIRMPatchVendor Advisory
http://secunia.com/advisories/21435
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/19441
vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/3227
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4101
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28295
vdb-entryx_refsource_XF

Link	Providers	Tags
http://drupal.org/node/77756		x_refsource_CONFIRMPatchVendor Advisory
http://secunia.com/advisories/21435		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/19441		vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/3227		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4101		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28295		vdb-entryx_refsource_XF