Open redirect

Open redirect vulnerability in the Content Construction Kit CCK 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages...

CVE-2015-5510

The CVE-2015-5510 entry concerns the Drupal Content Construction Kit (CCK) module. Affected: CCK 6.x-2.x before 6.x-2.10. Root cause: an open redirect vulnerability via the destinations parameter on certain admin pages, allowing remote attackers to redirect users to arbitrary sites (phishing risk...

Fedora 22 : drupal6-cck-2.10-1.fc22 (2015-12037)

https://www.drupal.org/project/cck Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 21 : drupal6-cck-2.10-1.fc21 (2015-12028)

https://www.drupal.org/project/cck Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for drupal6-cck FEDORA-2015-12037

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for drupal6-cck FEDORA-2015-12028

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Compass Rose - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-138

Compass Rose module provides a type of CCK field that allows to represent the most common orientations North, North-East, East, South-East, South, South-West, West and North-West. The module was embedding a JavaScript library from an external source that was not reliable, thereby exposing the sit...

Content Construction Kit (CCK) - Less Critical - Open Redirect - SA-CONTRIB-2015-126

The Content Construction Kit CCK project is a set of modules that allows you to add custom fields to nodes using a web browser. CCK uses a "destinations" query string parameter in URLs to redirect users to new destinations after completing an action on a few administration pages. Under certain...

[SECURITY] Fedora 20 Update: drupal6-filefield-3.12-1.fc20

FileField provides a universal file upload field for CCK. It is a robust alternative to core's Upload module and an absolute must for users uploadin g a large number of files. Great for managing video and audio files for podcast s on your own site. Optional: APC php-pecl-apcu uploadprogress...

[SECURITY] Fedora 19 Update: drupal6-filefield-3.12-1.fc19

FileField provides a universal file upload field for CCK. It is a robust alternative to core's Upload module and an absolute must for users uploadin g a large number of files. Great for managing video and audio files for podcast s on your own site. Optional: APC php-pecl-apcu uploadprogress...

SA-CONTRIB-2013-085 - Feed Element Mapper - Cross Site Scripting

Feed Element Mapper is an add-on module for FeedAPI that maps elements on a feed item such as tags or the author name to taxonomy or CCK fields. The module doesn't sufficiently filter text when displaying options to users. This vulnerability is mitigated by the fact that an attacker must have a...

SA-CONTRIB-2013-043 - MP3 Player - Cross Site Scripting (XSS)

This module enables you to easily enable a Flash MP3 Player on a CCK FileField. The module doesn't sufficiently filter user-supplied text from mp3 filenames. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create a node with an mp3 filefield wi...

Fedora 10 : drupal-cck-6.x.2.0-3.fc10 (2008-10143)

New upstream upstream, including fixes for XSS issues detailed in the upstream advisory DRUPAL-SA-2008-069: http://drupal.org/node/330546 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora Update for drupal6-date FEDORA-2012-4475

Check for the Version of drupal6-date OpenVAS Vulnerability Test Fedora Update for drupal6-date FEDORA-2012-4475 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 17 Update: drupal6-date-2.8-1.fc17

The Date API is available to be used by other modules and is not dependent on having CCK installed. The date module is a flexible date/time field type for the cck content module which requires the CCK content.module and the Date API module...

Fedora Update for drupal6-date FEDORA-2012-4616

Check for the Version of drupal6-date OpenVAS Vulnerability Test Fedora Update for drupal6-date FEDORA-2012-4616 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 15 Update: drupal6-date-2.8-1.fc15

The Date API is available to be used by other modules and is not dependent on having CCK installed. The date module is a flexible date/time field type for the cck content module which requires the CCK content.module and the Date API module...

[SECURITY] Fedora 16 Update: drupal6-date-2.8-1.fc16

The Date API is available to be used by other modules and is not dependent on having CCK installed. The date module is a flexible date/time field type for the cck content module which requires the CCK content.module and the Date API module...

[SECURITY] Fedora 15 Update: drupal7-field_permissions-1.0-0.2.beta2.fc15

The Field Permissions module is a drop-in replacement for the Content Permissions module shipped with CCK. It allows site administrators to set field-level permissions to edit or view CCK fields in any node, and optionally new feature compared to Content Permissions module, edit field during node...

Fedora Update for drupal-cck FEDORA-2010-15665

Check for the Version of drupal-cck OpenVAS Vulnerability Test Fedora Update for drupal-cck FEDORA-2010-15665 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...