Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Other Vulnerability - CVE-2006-0070 - Vulnerability Database
Drupal

Drupal Other Vulnerability - CVE-2006-0070

Medium
Reference: CVE-2006-0070
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-0070
Title: Drupal Other Vulnerability
Overview:

DISPUTED Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function name as demonstrated using variations of the alert() function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when quotFiltered HTMLquot is enabled and since quotFull HTMLquot would not filter HTML by design perhaps this should not be included in CVE.