CVE-2005-0682 Information

Description

Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.

Reference

http://drupal.org/drupal-4.5.2 http://drupal.org/files/drupal-4.5-xss-fix.patch http://secunia.com/advisories/14515