Unscored CVE-2006-4947 EUVD-2006-4933GHSA-x5mr-778h-grwq

Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject …

Published Sep 23, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."

References

http://drupal.org/node/85050
searchkeywords-parameters-xss(29063) vdb-entry
ADV-2006-3715 vdb-entry
22021 third-party-advisory
20126 vdb-entry