NuytsTech Security

CVE-2006-2832

by ·

Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.

Date published : 2006-06-05

http://www.securityfocus.com/bid/18245

http://www.securityfocus.com/archive/1/435792/100/0/threaded

Tags: