CVE-2006-4947

Published: Sep 23, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."

Affected (4)

Products: Drupal: Search Keyword Module

1 product

Search Keyword Module

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Drupal Search Keyword Module	Up to 1.15
Drupal Search Keyword Module	Version 1.12
Drupal Search Keyword Module	Version 1.13
Drupal Search Keyword Module	Version 1.14

References (10)

http://drupal.org/node/85050

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/22021

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/20126

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/3715

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29063

Source: cve@mitre.org

http://drupal.org/node/85050

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/22021

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/20126

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/3715

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/29063

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.