CVE-2006-4355

CVE-2006-4355 is a published XSS vulnerability in the Drupal Easylinks Module (easylinks.module) affecting 4.7 prior to 1.5.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The security rating from NVD shows low base score (2.6) with network a...

CVE-2006-4356

The CVE-2006-4356 issue affects Drupal Easylinks Module (easylinks.module) for Drupal 4.7, with impact prior to version 1.5.2.1. The vulnerability is a SQL injection allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Remediation is to upgrade to version 1.5.2.1 o...