2 matches found
CVE-2008-3741
The private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by a web browser, which allows remote authenticated users to conduct cross-site scripting XSS attacks by uploading files containing arbitrary web script or HTML...
3.5CVSS5.3AI score0.0121EPSS
SaveExploits0References9
CVE-2008-3741: Improper Neutralization of Input During Web Page Generation
The private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by a web browser, which allows remote authenticated users to conduct cross-site scripting XSS attacks by uploading files containing arbitrary web script or HTML...
3.5CVSS5.9AI score0.0121EPSS
SaveExploits0References2
20