CVE-2009-2076

CVE-2009-2076 is a cross-site scripting (XSS) vulnerability in the Drupal Views module (6.x) prior to 6.x-2.6. The issue allows remote authenticated users to inject arbitrary script/HTML via two vectors: (1) exposed filters in the Views UI admin interface and (2) the view name parameter in the de...

CVE-2008-6020

CVE-2008-6020 is a SQL injection vulnerability in the Drupal Views module (6.x) prior to 6.x-2.2. The issue arises from an exposed filter on CCK text fields, allowing remote attackers to execute arbitrary SQL commands. Affected product/component: Drupal Views 6.x; root cause: unsafeguarded input ...