Unrated severityNVD Advisory· Published Aug 27, 2006· Updated Jun 16, 2026

CVE-2006-4360

Description

Cross-site scripting (XSS) vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 (20060812) allows remote authenticated users with the "create products" permission to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Drupal/E Commerce Module
cpe:2.3:a:drupal:drupal_e-commerce_module:4.7:*:*:*:*:*:*:*
Drupal/E-commercellm-create
Range: =4.7

Patches

Vulnerability mechanics

References

drupal.org/node/80084nvdPatch
secunia.com/advisories/21604nvdPatchVendor Advisory
www.securityfocus.com/bid/19675nvdPatch
www.vupen.com/english/advisories/2006/3364nvd
exchange.xforce.ibmcloud.com/vulnerabilities/28528nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000