Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2006-4120

Cross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Published: Aug 14, 2006
  • Updated: Nov 9, 2025
  • CVE: CVE-2006-4120
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.1
  • AV:N/AC:H/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
Composer icon drupal / drupal - 4.6.x
Composer icon drupal / drupal 4.5.4 4.5.4.x
Composer icon drupal / drupal 4.5.2 4.5.2.x
drupal / recipe_module - 1.53.x
Composer icon drupal / drupal 4.0 4.0.x
Composer icon drupal / drupal 4.5.7 4.5.7.x
Composer icon drupal / drupal 4.4.1 4.4.1.x
Composer icon drupal / drupal 4.5.1 4.5.1.x
Composer icon drupal / drupal 4.4.2 4.4.2.x
Composer icon drupal / drupal 4.5.5 4.5.5.x
Composer icon drupal / drupal 4.5 4.5.x
Composer icon drupal / drupal 4.5.3 4.5.3.x
Composer icon drupal / drupal 4.4.0 4.4.0.x
Composer icon drupal / drupal 4.5.6 4.5.6.x