Cross site scripting

Cross-site scripting XSS vulnerability in the upload module upload.module in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename...

CVE-2006-2832

CVE-2006-2832 is a Cross-Site Scripting (XSS) vulnerability in the Drupal upload.module that affects Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, enabling an attacker to inject arbitrary script or HTML via the uploaded filename. The vulnerability was addressed in vendor advisories; OpenVAS a...

CVE-2006-2832

Cross-site scripting XSS vulnerability in the upload module upload.module in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename...