CVE-2006-4109

Published: Aug 14, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (3)

Products: Drupal: Bibliography Module

Drupal

1 product

Bibliography Module

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Drupal Bibliography Module	Up to 4.5
Drupal Bibliography Module	Up to 4.6_rev1.1.1.1.4.10
Drupal Bibliography Module	Up to 4.7_rev1.13.2.4

References (10)

http://drupal.org/node/77756

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21435

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/19441

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/3227

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28295

Source: cve@mitre.org

http://drupal.org/node/77756