CVE-2006-4947 Information

Description

Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \lack of validation on output.\

Reference

http://drupal.org/node/85050 http://secunia.com/advisories/22021 http://www.securityfocus.com/bid/20126 http://www.vupen.com/english/advisories/2006/3715 https://exchange.xforce.ibmcloud.com/vulnerabilities/29063

Share on: