Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:views:6.x-2.0:*:*:*:*:*:*:*

part: a version: 6.x-2.0 update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductViews (76711b5c-eb44-5d60-8475-86974c149482)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2076 vulnerable 2026-06-08 04:51:26.629317 Details available
Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature. NOTE: vector 2 is only exploitable by users with administer views permissions.
Published: 2009-06-16T19:00:00.000Z
Updated: 2024-09-16T22:41:14.732Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6020 vulnerable 2026-06-08 04:50:53.812741 Details available
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."
Published: 2009-02-02T21:29:00.000Z
Updated: 2024-08-07T11:13:13.996Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.