GCVE - cpe:2.3:a:earl_miles:views:6.x-3.x:dev:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:earl_miles:views:6.x-3.x:dev:*:*:*:*:*:*

part: a version: 6.x-3.x update: dev

Vendor	Earl Miles (`8afe23b8-f3b0-53d2-802e-ad8abdbc5dc0`)
Product	Views (`4cd3121f-d03d-5c02-8414-84bcec851215`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-4521`	vulnerable	2026-06-08 04:56:28.898252	Details available Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path. Published: 2010-12-23T17:00:00.000Z Updated: 2024-08-07T03:51:17.291Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/0011 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052802.html http://www.openwall.com/lists/oss-security/2010/12/16/7 http://drupal.org/node/999380 http://www.openwall.com/lists/oss-security/2010/12/22/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4520`	vulnerable	2026-06-08 04:56:28.889630	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via (1) a URL or (2) an aggregator feed title. Published: 2010-12-23T17:00:00.000Z Updated: 2024-09-17T03:43:09.806Z Open on db.gcve.eu Reference links http://drupal.org/node/829840 http://www.openwall.com/lists/oss-security/2010/12/16/7 http://www.openwall.com/lists/oss-security/2010/12/22/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4519`	vulnerable	2026-06-08 04:56:28.888397	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views. Published: 2010-12-23T17:00:00.000Z Updated: 2024-09-16T18:24:18.369Z Open on db.gcve.eu Reference links http://drupal.org/node/829840 http://www.openwall.com/lists/oss-security/2010/12/16/7 http://www.openwall.com/lists/oss-security/2010/12/22/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.