1922 matches found
CVE-2009-2237
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures aka actio...
Fedora Core 10 FEDORA-2009-6389 (drupal-views)
The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6389. OpenVAS Vulnerability Test $Id: fcore20096389.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6389 drupal-views Authors: Thomas Reinke Copyright: Copyright...
Fedora Core 9 FEDORA-2009-6171 (drupal-views)
The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6171. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
Fedora Core 11 FEDORA-2009-6049 (drupal-views)
The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6049. OpenVAS Vulnerability Test $Id: fcore20096049.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6049 drupal-views Authors: Thomas Reinke Copyright: Copyright...
Fedora Core 10 FEDORA-2009-6389 (drupal-views)
The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6389. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
Fedora Core 11 FEDORA-2009-6049 (drupal-views)
The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6049. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
Fedora Core 9 FEDORA-2009-6171 (drupal-views)
The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6171. OpenVAS Vulnerability Test $Id: fcore20096171.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6171 drupal-views Authors: Thomas Reinke Copyright: Copyright...
Cross site scripting
Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...
CVE-2009-2076
Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...
CVE-2009-2076
Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...
CVE-2009-2076
CVE-2009-2076 is a cross-site scripting (XSS) vulnerability in the Drupal Views module (6.x) prior to 6.x-2.6. The issue allows remote authenticated users to inject arbitrary script/HTML via two vectors: (1) exposed filters in the Views UI admin interface and (2) the view name parameter in the de...
[SECURITY] Fedora 10 Update: drupal-views-6.x.2.6-1.fc10
The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...
Fedora 9 : drupal-views-6.x.2.6-1.fc9 (2009-6171)
Advisory ID: DRUPAL-SA-CONTRIB-2009-037 0 Project: Views Versions: 6.x-2.x Date: 2009-June-10 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting XSS, Access Bypass -------- DESCRIPTION -------------------------------------------------------- - The...
Fedora 10 : drupal-views-6.x.2.6-1.fc10 (2009-6389)
Advisory ID: DRUPAL-SA-CONTRIB-2009-037 0 Project: Views Versions: 6.x-2.x Date: 2009-June-10 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting XSS, Access Bypass -------- DESCRIPTION -------------------------------------------------------- - The...
PT-2009-4529 · Drupal · Drupal Views
Name of the Vulnerable Software and Affected Versions: Drupal Views module versions prior to 6.x-2.6 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via exposed filters in the Views UI administrative interface and the view nam...
Fedora 11 : drupal-views-6.x.2.6-1.fc11 (2009-6049)
Advisory ID: DRUPAL-SA-CONTRIB-2009-037 0 Project: Views Versions: 6.x-2.x Date: 2009-June-10 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting XSS, Access Bypass -------- DESCRIPTION -------------------------------------------------------- - The...
SA-CONTRIB-2009-037 - Views - Multiple vulnerabilities
The Views module provides a flexible method for Drupal site designers to control how lists of content are presented. In the Views UI administrative interface when configuring exposed filters, user input presented as possible exposed filters is not correctly filtered, potentially allowing maliciou...
SA-CONTRIB-2009-029 - Views Bulk Operations - Access Bypass
Views Bulk operations allows registered procedures called actions to be applied on a result set of Drupal nodes, returned by the Views module. Through the Views Bulk Operations interface, it is possible to let users who are not authorized to update specific nodes or classes of nodes, to still app...
Fedora 10 : drupal-views-6.x.2.2-1.fc10 (2008-11578)
Fixes SA-2008-075 http://drupal.org/node/348321. http://drupal.org/node/347831 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2009-0575
Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...