• info
• discussion
• exploit
• solution
• references

Drupal Unspecified Cross-Site Scripting Vulnerability

Solution:
The vendor has released an update to address this issue:


Drupal Drupal 4.0 .0

• Drupal drupal-4.5.2.tar.gz
  http://drupal.org/files/projects/drupal-4.5.2.tar.gz

Drupal Drupal 4.1 .0

• Drupal drupal-4.5.2.tar.gz
  http://drupal.org/files/projects/drupal-4.5.2.tar.gz

Drupal Drupal 4.2 .0 RC

• Drupal drupal-4.5.2.tar.gz
  http://drupal.org/files/projects/drupal-4.5.2.tar.gz