CVE-2006-4360: XSS
Cross-site scripting (XSS) vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 (20060812) allows remote authenticated users with the "create products" permission to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4360?
CVE-2006-4360 is considered a medium severity vulnerability due to its potential impact on users' data and security.
How do I fix CVE-2006-4360?
To fix CVE-2006-4360, update the Drupal E-commerce module to version 4.7 or later that addresses this vulnerability.
Who is affected by CVE-2006-4360?
CVE-2006-4360 affects remote authenticated users with the "create products" permission on Drupal E-commerce 4.7 before file.module 1.37.2.4.
What type of attack does CVE-2006-4360 facilitate?
CVE-2006-4360 facilitates cross-site scripting (XSS) attacks allowing injection of arbitrary web scripts or HTML.
Is CVE-2006-4360 still a risk today?
While CVE-2006-4360 is an older vulnerability, systems still running affected versions of Drupal E-commerce are at risk if not updated.