3 matches found
CVE-2006-4821
Cross-site scripting XSS vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-4821
Cross-site scripting XSS vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-4821
CVE-2006-4821 is a cross-site scripting (XSS) flaw in the Drupal 4.7 Userreview module prior to version 1.19 (2006-09-12). The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD metrics assign a CVSS v2 base score of 4.3 (Medium); attack ...