EUVD-2006-4808

Malware in sbrugna...

CVE-2006-4821

CVE-2006-4821 is a cross-site scripting (XSS) flaw in the Drupal 4.7 Userreview module prior to version 1.19 (2006-09-12). The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD metrics assign a CVSS v2 base score of 4.3 (Medium); attack ...