Design/Logic Flaw

The Node Reference module in Content Construction Kit CCK module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes...

Improper access control

The Node Reference module in Content Construction Kit CCK module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to read controlled nodes...

CVE-2010-2353

CVE-2010-2353 affects the Drupal Content Construction Kit (CCK) Node Reference module for Drupal 6.x prior to 6.x-2.7. The backend URL used by the autocomplete widget does not perform field‑level access checks on the source field, allowing remote attackers to discover titles and IDs of nodes the ...

CVE-2010-2353

The Node Reference module in Content Construction Kit CCK module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes...

CVE-2010-2352

CVE-2010-2352 affects the Drupal Content Construction Kit (CCK) Node Reference module. The Node Reference feature in CCK 5.x (before 5.x-1.11) and 6.x (before 6.x-2.7) fails to perform access checks when displaying referenced nodes, enabling remote attackers to read nodes they should not access. ...

SA-CONTRIB-2010-065 - Content Construction Kit (CCK) - Access Bypass

The Content Construction Kit CCK project is a set of modules that allows you to add custom fields to nodes using a web browser. The CCK "Node Reference" module can be configured to display referenced nodes as hidden, title, teaser or full view. Node access was not checked when displaying these...

CVE-2010-1998

Cross-site scripting XSS vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers...

Cross site scripting

Cross-site scripting XSS vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers...

CVE-2010-1998

CVE-2010-1998 affects the Drupal CCK TableField module (6.x) prior to 6.x-1.2. The vulnerability is an XSS via table headers that remote authenticated users with certain node creation/editing privileges can exploit to inject arbitrary script/HTML. The NVD entry lists a low base score (CVSS2: 2.1,...

CVE-2010-1998: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers...

Solaris Update for Asian CCK locales 120414-26

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120414-26 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for Asian CCK locales 120415-26

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120415-26 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for Asian CCK locales 120414-26

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120414-26 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for Asian CCK locales 120415-26

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120415-26 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for Asian CCK locales 120414-25

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120414-25 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for Asian CCK locales 120415-25

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120415-25 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for Asian CCK locales 120415-25

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120415-25 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for Asian CCK locales 120414-25

Check for the Version of Asian CCK locales OpenVAS Vulnerability Test Solaris Update for Asian CCK locales 120414-25 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Path traversal

The CCK Comment Reference module 5.x before 5.x-1.2 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to bypass intended access restrictions and read comments by using the autocomplete path...

CVE-2009-4520

The CCK Comment Reference module 5.x before 5.x-1.2 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to bypass intended access restrictions and read comments by using the autocomplete path...