2914 matches found
CVE-2009-2076: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...
SA-CONTRIB-2009-037 - Views - Multiple vulnerabilities
The Views module provides a flexible method for Drupal site designers to control how lists of content are presented. In the Views UI administrative interface when configuring exposed filters, user input presented as possible exposed filters is not correctly filtered, potentially allowing maliciou...
SA-CONTRIB-2009-029 - Views Bulk Operations - Access Bypass
Views Bulk operations allows registered procedures called actions to be applied on a result set of Drupal nodes, returned by the Views module. Through the Views Bulk Operations interface, it is possible to let users who are not authorized to update specific nodes or classes of nodes, to still app...
Fedora 10 : drupal-views-6.x.2.2-1.fc10 (2008-11578)
Fixes SA-2008-075 http://drupal.org/node/348321. http://drupal.org/node/347831 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2008-6240: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in data/views/index.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-0575
Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-0575
Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-0575
CVE-2009-0575 concerns Drupal’s Views Bulk Operations module, where the theme_views_bulk_operations_confirmation function in views_bulk_operations.module is vulnerable to cross-site scripting (XSS). Affected: Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4. Vector is unspecified b...
Fedora Update for drupal-views FEDORA-2008-11519
Check for the Version of drupal-views OpenVAS Vulnerability Test Fedora Update for drupal-views FEDORA-2008-11519 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for drupal-views FEDORA-2008-11578
Check for the Version of drupal-views OpenVAS Vulnerability Test Fedora Update for drupal-views FEDORA-2008-11578 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2009-0575: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Fedora Update for drupal-views FEDORA-2008-11578
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for drupal-views FEDORA-2008-11519
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
SA-CONTRIB-2009-005 - Views bulk operations - Cross site scripting
Views bulk operations augments Views by enabling bulk operations to be executed on the content displayed by a view. Views bulk operations does not properly escape user-supplied data on some pages, allowing malicious users to insert arbitrary HTML and script code into these pages. Such a cross sit...
Sql injection
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."...
CVE-2008-6020
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."...
CVE-2008-6020
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."...
CVE-2008-6020
CVE-2008-6020 is a SQL injection vulnerability in the Drupal Views module (6.x) prior to 6.x-2.2. The issue arises from an exposed filter on CCK text fields, allowing remote attackers to execute arbitrary SQL commands. Affected product/component: Drupal Views 6.x; root cause: unsafeguarded input ...
CVE-2008-6020: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."...