RSS   Podatności dla 'CCK'   RSS

2010-06-21
 
CVE-2010-2352

CWE-20
 
 
The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to read controlled nodes.

 
2009-08-13
 
CVE-2008-6972

 
 
Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via the (1) "field label," (2) "help text," or (3) "allowed values" settings.

 

 >>> Vendor: Karen stevenson 3 Produkty
CCK
DATE
Calendar

Copyright 2024, cxsecurity.com

 

Back to Top