Unscored CVE-2008-6170 EUVD-2008-6140GHSA-rq65-q8rh-x7j3

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book co…

Published Feb 19, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title.

References

http://drupal.org/node/324824
31882 vdb-entry
32441 third-party-advisory
32297 third-party-advisory
drupal-book-page-xss(46052) vdb-entry
FEDORA-2008-9170 vendor-advisory
FEDORA-2008-9213 vendor-advisory
ADV-2008-2913 vdb-entry