Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-2833
HistoryJun 06, 2006 - 12:00 a.m.

CVE-2006-2833

2006-06-0600:00:00
ubuntu.com
ubuntu.com
11

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.9%

Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal
4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web script or
HTML via inputs that are not properly validated when the page title is
output, possibly involving the $names variable.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchdrupal< 4.5.8-2UNKNOWN

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.9%