Launchpad.net

CVE 2005-0682

Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.

See the CVE page on Mitre.org for more details.

References