CVE-2006-4646

CVE-2006-4646 is a cross-site scripting (XSS) vulnerability in the Drupal Pathauto module (Drupal 4.7) before pathauto_node.inc 1.17.2.1 and Drupal 4.6 before pathauto_node.inc 1.14.2.1. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected comp...