2831 matches found
CVE-2013-0321
Cross-site scripting XSS vulnerability in Views in the Ubercart Views ucviews module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...
CVE-2013-0181
Cross-site scripting XSS vulnerability in Views in the Search API searchapi module 7.x-1.x before 7.x-1.4 for Drupal, when using certain backends and facets, allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message...
Cross site scripting
Cross-site scripting XSS vulnerability in Views in the Ubercart Views ucviews module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...
Cross site scripting
Cross-site scripting XSS vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...
CVE-2013-0321
Cross-site scripting XSS vulnerability in Views in the Ubercart Views ucviews module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...
CVE-2013-0321
Cross-site scripting XSS vulnerability in Views in the Ubercart Views ucviews module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...
CVE-2013-0322
Cross-site scripting XSS vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...
CVE-2013-0321
CVE-2013-0321 involves a cross-site scripting (XSS) vulnerability in the Ubercart Views module (uc_views) for Drupal 6.x. The issue arises from the Drupal Views integration where the full name field is not properly sanitized on output, enabling remote attackers to inject arbitrary scripts or HTML...
CVE-2013-0322
CVE-2013-0322 affects the Drupal Ubercart module (7.x-3.x) prior to 7.x-3.4, with the XSS vulnerability arising in the Views integration when processing the full name field. The root cause is unsanitized output in the full name field, allowing remote attackers to inject arbitrary script/HTML. Pub...
CVE-2013-1887: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields...
CVE-2013-0321: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Views in the Ubercart Views ucviews module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...
CVE-2013-0322
Cross-site scripting XSS vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2013-0181: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Views in the Search API searchapi module 7.x-1.x before 7.x-1.4 for Drupal, when using certain backends and facets, allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message...
PT-2013-3450
Name of the Vulnerable Software and Affected Versions Drupal Views module versions 7.x-3.x before 7.x-3.6 Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields. This is due to multiple cross-si...
PT-2013-2233
Name of the Vulnerable Software and Affected Versions uc views module version 6.x before 6.x-3.3 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the full name field. Recommendations For versions...
SA-CONTRIB-2013-019 - Ubercart Views - Cross site scripting (XSS)
Ubercart Views provides Views integration for the Ubercart shopping cart module. The "full name" field in Views is not properly sanitized on output. The vulnerability is mitigated by the fact that an attacker must get far enough in the checkout process to store their name with an order. CVE...
httpd: mod_negotiation CRLF injection via untrusted file names in directories with MultiViews enabled
CRLF injection vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP respons...
httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled
Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...
httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled
Multiple cross-site scripting XSS vulnerabilities in the makevariantlist function in modnegotiation.c in the modnegotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted...
httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled
Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...