CVE-2008-6020

ALTO 7.5CVE-2008-6020 · Published 02/02/2009 · updated 16/06/2026

In breve

CVE-2008-6020 è una vulnerabilità ALTO (CVSS 7.5) che riguarda views (drupal).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
views drupal	`= 6.x-2.0≤ 6.x-2.1`	No fix yet

Description

SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."

References

drupal.org/node/347831
drupal.org/node/348321 · Patch
osvdb.org/50795
secunia.com/advisories/33225 · Vendor Advisory
secunia.com/advisories/33289
securityfocus.com/bid/32895 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/47454
redhat.com/archives/fedora-package-announce/2008-December/msg01024.html

Altre vulnerabilità di views

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free