[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1007-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1007-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1226

CVE-2006-1226 is a cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8. Attackers can inject arbitrary web script or HTML via unknown attack vectors. The descriptions do not provide exploitation details. Remediation referenced in connected Debian advisorie...