CVE-2006-4821

MEDIO 4.3CVE-2006-4821 · Published 15/09/2006 · updated 16/06/2026

In breve

CVE-2006-4821 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda drupal userreview module (drupal).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 79.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
drupal userreview module drupal	`= 4.7`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

drupal.org/node/83954 · Patch
secunia.com/advisories/21907 · Vendor Advisory
securityfocus.com/bid/20015
vupen.com/english/advisories/2006/3603
exchange.xforce.ibmcloud.com/vulnerabilities/28931

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free