Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2008-0273 - Vulnerability Database
Drupal

Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2008-0273

Medium
Reference: CVE-2008-0273
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-0273
Title: Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

Interpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 when Internet Explorer 6 is used allows remote attackers to conduct cross-site scripting (XSS) attacks via invalid UTF-8 byte sequences which are not processed as UTF-8 by Drupal39s HTML filtering but are processed as UTF-8 by Internet Explorer effectively removing characters from the document and defeating the HTML protection mechanism.