GCVE - cpe:2.3:a:earl_miles:views:6.x-2.0:rc2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:earl_miles:views:6.x-2.0:rc2:*:*:*:*:*:*

part: a version: 6.x-2.0 update: rc2

Vendor	Earl Miles (`8afe23b8-f3b0-53d2-802e-ad8abdbc5dc0`)
Product	Views (`4cd3121f-d03d-5c02-8414-84bcec851215`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4113`	vulnerable	2026-06-08 04:59:29.451129	Details available SQL injection vulnerability in the Views module before 6.x-2.13 for Drupal allows remote attackers to execute arbitrary SQL commands via vectors related to "filters/arguments on certain types of views with specific configurations of arguments." Published: 2012-02-17T23:00:00.000Z Updated: 2024-08-07T00:01:50.434Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2011/11/04/3 https://exchange.xforce.ibmcloud.com/vulnerabilities/71124 http://www.securityfocus.com/bid/50500 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069499.html http://drupal.org/node/1329898	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4521`	vulnerable	2026-06-08 04:56:28.890385	Details available Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path. Published: 2010-12-23T17:00:00.000Z Updated: 2024-08-07T03:51:17.291Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/0011 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052802.html http://www.openwall.com/lists/oss-security/2010/12/16/7 http://drupal.org/node/999380 http://www.openwall.com/lists/oss-security/2010/12/22/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4520`	vulnerable	2026-06-08 04:56:28.889317	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via (1) a URL or (2) an aggregator feed title. Published: 2010-12-23T17:00:00.000Z Updated: 2024-09-17T03:43:09.806Z Open on db.gcve.eu Reference links http://drupal.org/node/829840 http://www.openwall.com/lists/oss-security/2010/12/16/7 http://www.openwall.com/lists/oss-security/2010/12/22/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4519`	vulnerable	2026-06-08 04:56:28.874282	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views. Published: 2010-12-23T17:00:00.000Z Updated: 2024-09-16T18:24:18.369Z Open on db.gcve.eu Reference links http://drupal.org/node/829840 http://www.openwall.com/lists/oss-security/2010/12/16/7 http://www.openwall.com/lists/oss-security/2010/12/22/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.