SA-CONTRIB-2010-036 - Views - multiple vulnerabilities

The Views module provides a flexible method for Drupal site designers to control how lists of content are presented. Views accepts parameters in the URL and uses them in an AJAX callback. The values were not filtered, thus allowing injection of JavaScript code via the AJAX response. A user tricke...

CVE-2009-3258

vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete 1 attachments, 2 reports, 3 filters, 4 views, and 5 tickets; insert 6 attachments, 7 reports, 8 filters, 9 views, and 10 tickets; and edit 11 reports, 12 filters, 13 views, and 14 tickets via...

CVE-2009-3258

vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete 1 attachments, 2 reports, 3 filters, 4 views, and 5 tickets; insert 6 attachments, 7 reports, 8 filters, 9 views, and 10 tickets; and edit 11 reports, 12 filters, 13 views, and 14 tickets via...

[Full-disclosure] Drupal 6 Date/Calendar XSS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Report Date of Original Vendor Contact: May 19, 2009 11:45 GMT -0400 Report Number: 8890 Author: Justin C. Klein Keane [email protected] Details of this vulnerability are also posted at the public URL...

Design/Logic Flaw

Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures aka actio...

CVE-2009-2237

The CVE-2009-2237 entry concerns the Drupal Views Bulk Operations module (Drupal: VBO) with vulnerable versions: 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7. The vulnerability allows remote attackers to bypass intended access restrictions and modify created content ("nodes or classes of nod...

CVE-2009-2237

Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures aka actio...

Fedora Core 10 FEDORA-2009-6389 (drupal-views)

The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6389. OpenVAS Vulnerability Test $Id: fcore20096389.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6389 drupal-views Authors: Thomas Reinke Copyright: Copyright...

Fedora Core 9 FEDORA-2009-6171 (drupal-views)

The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6171. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 11 FEDORA-2009-6049 (drupal-views)

The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6049. OpenVAS Vulnerability Test $Id: fcore20096049.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6049 drupal-views Authors: Thomas Reinke Copyright: Copyright...

Fedora Core 11 FEDORA-2009-6049 (drupal-views)

The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6049. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-6389 (drupal-views)

The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6389. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 9 FEDORA-2009-6171 (drupal-views)

The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6171. OpenVAS Vulnerability Test $Id: fcore20096171.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6171 drupal-views Authors: Thomas Reinke Copyright: Copyright...

Cross site scripting

Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...

CVE-2009-2076

Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...

CVE-2009-2076

Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...

CVE-2009-2076

CVE-2009-2076 is a cross-site scripting (XSS) vulnerability in the Drupal Views module (6.x) prior to 6.x-2.6. The issue allows remote authenticated users to inject arbitrary script/HTML via two vectors: (1) exposed filters in the Views UI admin interface and (2) the view name parameter in the de...

[SECURITY] Fedora 10 Update: drupal-views-6.x.2.6-1.fc10

The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...

Fedora 10 : drupal-views-6.x.2.6-1.fc10 (2009-6389)

Advisory ID: DRUPAL-SA-CONTRIB-2009-037 0 Project: Views Versions: 6.x-2.x Date: 2009-June-10 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting XSS, Access Bypass -------- DESCRIPTION -------------------------------------------------------- - The...

Fedora 9 : drupal-views-6.x.2.6-1.fc9 (2009-6171)

Advisory ID: DRUPAL-SA-CONTRIB-2009-037 0 Project: Views Versions: 6.x-2.x Date: 2009-June-10 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting XSS, Access Bypass -------- DESCRIPTION -------------------------------------------------------- - The...