Unscored CVE-2006-4360 EUVD-2006-4348GHSA-hh2j-752f-jh3c

Cross-site scripting (XSS) vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 (20060812) allows remote authenticated us…

Published Aug 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 (20060812) allows remote authenticated users with the "create products" permission to inject arbitrary web script or HTML via unspecified vectors.

References

21604 third-party-advisory
http://drupal.org/node/80084
ADV-2006-3364 vdb-entry
19675 vdb-entry
ecommerce-unspecified-xss(28528) vdb-entry