CVE-2006-4120

Cross-site scripting XSS vulnerability in the Recipe module recipe.module before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4120

The CVE-2006-4120 entry documents a cross-site scripting (XSS) vulnerability in Drupal’s Recipe module (recipe.module) prior to version 1.54, affecting Drupal 4.6 and earlier. The underlying issue is an XSS flaw in the Recipe module that allows remote attackers to inject arbitrary web scripts or ...

Revision to DRUPAL-SA-2006-013 - Recipe

It is possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output from the contributed Recipe module. This may lead to administrator access if certain conditions are met. Learn more about XSS on Wikipedia. This is a revision to...

DRUPAL-SA-2006-013: Recipe module

It is possible for a malicious user to insert and execute XSS, due to lack of validation on output. Versions affected Please check the CVS $Id$ field in the file recipe.module to determine whether the version you are running is vulnerable. Versions older than the following are vulnerable: // $Id:...

CVE-2006-3343: Undefined Security Weakness

PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to execute arbitrary PHP code via a URL in the crisoftricette parameter...

CVE-2004-2568

Multiple cross-site scripting XSS vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 user id, 2 recipe id, 3 category id, and 4 other ID number fields...

CVE-2004-2567: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 user id, 2 recipe id, 3 category id, and 4 other ID number fields...

CVE-2004-2568: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 user id, 2 recipe id, 3 category id, and 4 other ID number fields...

CVE-2003-1190

Cross-site scripting XSS vulnerability in PHPRecipeBook 1.24 through 2.17 allows remote attackers to inject arbitrary web script or HTML via a recipe...

CVE-2003-1190: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PHPRecipeBook 1.24 through 2.17 allows remote attackers to inject arbitrary web script or HTML via a recipe...

CVE-2003-1190

Cross-site scripting XSS vulnerability in PHPRecipeBook 1.24 through 2.17 allows remote attackers to inject arbitrary web script or HTML via a recipe...