Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to node titles. NOTE: some of these details are obtained from third party information.
References
| Link | Resource |
|---|---|
| http://drupal.org/node/369223 | Patch Vendor Advisory |
| http://osvdb.org/51751 | |
| http://secunia.com/advisories/33836 | Vendor Advisory |
| http://www.securityfocus.com/bid/33622 | Patch |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/48516 | |
| http://drupal.org/node/369223 | Patch Vendor Advisory |
| http://osvdb.org/51751 | |
| http://secunia.com/advisories/33836 | Vendor Advisory |
| http://www.securityfocus.com/bid/33622 | Patch |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/48516 |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:00
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://drupal.org/node/369223 - Patch, Vendor Advisory | |
| References | () http://osvdb.org/51751 - | |
| References | () http://secunia.com/advisories/33836 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/33622 - Patch | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/48516 - |
Information
Published : 2009-02-13 17:30
Updated : 2024-11-21 01:00
NVD link : CVE-2009-0575
Mitre link : CVE-2009-0575
CVE.ORG link : CVE-2009-0575
JSON object : View
Products Affected
drupal
- views_bulk_operations
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')