CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2006/09/23 1:07 a.m.•32 views

CVE-2006-4949

Cross-site scripting XSS vulnerability in the Drupal 4.6 Site Profile Directory profilepages.module before 1.1.2.1 and the Drupal 4.7 Site Profile Directory profilepages.module before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack o...

4.3CVSS5.8AI score0.01158EPSS

SaveExploits0References5

Cvelist•added 2006/09/23 1:00 a.m.•43 views

CVE-2006-4949

5.8AI score0.01158EPSS

SaveExploits0References5

CVE•added 2006/09/23 1:00 a.m.•76 views

CVE-2006-4949

Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1 and Drupal 4.7 Site Profile Directory (profile_pages.module) before 1.2.2.1 contain an XSS vulnerability caused by lack of output validation, potentially in the name and title parameters. Remote attackers could inject arbitra...

4.3CVSS6AI score0.01158EPSS

SaveExploits0References5Affected Software1

Rapid7 Vulnerability Database (full)•added 2006/09/23 12:00 a.m.•4 views

CVE-2006-4949: Undefined Security Weakness

4.3CVSS6.1AI score0.01158EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by