Skip to content
OpenAdvisories
Unscored DSA-1147-1 1 CVE

drupal - missing input sanitising

Published Aug 9, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 drupal 4.5.3-6.1sarge3

Vulnerabilities 1

  • Unscored —

    Cross-site scripting (XSS) vulnerability in user.module in Drupal 4.6 before 4.6.9, and 4.7 before 4.7.3, allows remote…