2615 matches found
Fedora 14 : drupal-views-6.x.2.12-1.fc14 (2010-19009)
New upstream version fixing DRUPAL-SA-CONTRIB-2010-111 : http://drupal.org/node/999380 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...
Fedora 13 : drupal-views-6.x.2.12-1.fc13 (2010-18927)
New upstream version fixing DRUPAL-SA-CONTRIB-2010-111 : http://drupal.org/node/999380 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...
[SECURITY] Fedora 14 Update: drupal-views-6.x.2.12-1.fc14
The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...
FreeBSD : Drupal Views plugin -- XSS (ff8b419a-0ffa-11e0-becc-0022156e8794)
Drupal security team reports : The Views module provides a flexible method for Drupal site designers to control how lists and tables of content are presented. Under certain circumstances, Views could display parts of the page path without escaping, resulting in a relected Cross Site Scripting XSS...
CVE-2010-4521
Cross-site scripting XSS vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path...
CVE-2010-4519
Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...
CVE-2010-4520
Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...
Cross site scripting
Cross-site scripting XSS vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path...
CVE-2010-4521
This entry (CVE-2010-4521) concerns the Drupal Views module (6.x) before 6.x-2.12. The vulnerability is an XSS flaw that allows an attacker to inject arbitrary web script or HTML via a page path, as described by connected sources (Drupal/VI). The OpenVAS/Nessus entries corroborate XSS in the Drup...
CVE-2010-4519
Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...
CVE-2010-4520
The CVE-2010-4520 entry describes multiple cross-site scripting (XSS) vulnerabilities in Drupal’s Views module for 6.x releases, specifically before 6.x-2.11. The issue allows remote attackers to inject arbitrary web script or HTML via (1) a URL or (2) an aggregator feed title. The provided docum...
CVE-2010-4521
Cross-site scripting XSS vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path...
CVE-2010-4520
Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...
CVE-2010-4519
The CVE-2010-4519 entry concerns Drupal’s Views module (Views UI) with cross-site request forgery vulnerabilities in the 5.x series (<5.x-1.8) and the 6.x series (
CVE-2010-4520: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...
CVE-2010-4519: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...
CVE-2010-4521: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path...
SA-CONTRIB-2010-111 - Views - Cross Site Scripting
The Views module provides a flexible method for Drupal site designers to control how lists and tables of content are presented. Under certain circumstances, Views could display parts of the page path without escaping, resulting in a relected Cross Site Scripting XSS vulnerability. An attacker cou...