First published: Tue Dec 31 2002(Updated: )
Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Drupal Drupal | =4.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2002-1806 is rated as high due to its potential for remote exploitation through XSS.
To fix CVE-2002-1806, upgrade to the latest version of Drupal that has addressed this vulnerability.
CVE-2002-1806 specifically affects Drupal version 4.0.0.
CVE-2002-1806 is a cross-site scripting (XSS) vulnerability.
Yes, CVE-2002-1806 can be exploited remotely by injecting malicious JavaScript through IMG tags.