CVE-2005-0682

Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.

• http://drupal.org/drupal-4.5.2Patch, Vendor Advisory
• http://drupal.org/files/drupal-4.5-xss-fix.patchPatch
• http://secunia.com/advisories/14515Patch, Vendor Advisory
• http://drupal.org/drupal-4.5.2Patch, Vendor Advisory
• http://drupal.org/files/drupal-4.5-xss-fix.patchPatch
• http://secunia.com/advisories/14515Patch, Vendor Advisory

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0676index.php in Zorum 3.5 allows remote attackers to trigger an…
• CVE-2005-0677index.php for Zorum 3.5 allows remote attackers to perform c…
• CVE-2005-0678PHP remote file inclusion vulnerability in formmail.inc.php …
• CVE-2005-0679PHP remote file inclusion vulnerability in tell_a_friend.inc…
• CVE-2005-0680PHP remote file inclusion vulnerability in download_center_l…
• CVE-2005-0681Nokia Symbian 60 allows remote attackers to cause a denial o…
• CVE-2005-0683Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-0684Multiple buffer overflows in the web tool for MySQL MaxDB be…
• CVE-2005-0685Multiple access validation errors in OutStart Participate En…
• CVE-2005-0686Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pix…
• CVE-2005-0687Format string vulnerability in Hashcash 1.16 allows remote a…
• CVE-2005-0688Windows Server 2003 and XP SP2, with Windows Firewall turned…