Логотип exploitDog
bind:CVE-2006-2832
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2006-2832

Количество 4

Количество 4

ubuntu логотип

CVE-2006-2832

около 19 лет назад

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

CVSS2: 2.6
EPSS: Низкий
nvd логотип

CVE-2006-2832

около 19 лет назад

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

CVSS2: 2.6
EPSS: Низкий
debian логотип

CVE-2006-2832

около 19 лет назад

Cross-site scripting (XSS) vulnerability in the upload module (upload. ...

CVSS2: 2.6
EPSS: Низкий
github логотип

GHSA-vf6r-36v5-6m37

около 3 лет назад

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2006-2832

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

CVSS2: 2.6
1%
Низкий
около 19 лет назад
nvd логотип
CVE-2006-2832

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

CVSS2: 2.6
1%
Низкий
около 19 лет назад
debian логотип
CVE-2006-2832

Cross-site scripting (XSS) vulnerability in the upload module (upload. ...

CVSS2: 2.6
1%
Низкий
около 19 лет назад
github логотип
GHSA-vf6r-36v5-6m37

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

1%
Низкий
около 3 лет назад

Уязвимостей на страницу