Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

drupal content construction kit 6.x-2.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-5510
Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x prior to 6.x-2.10 for Drupal allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages.
Content Construction Kit Project Content Construction Kit 6.x-2.0Content Construction Kit Project Content Construction Kit 6.x-2.5Content Construction Kit Project Content Construction Kit 6.x-2.6Content Construction Kit Project Content Construction Kit 6.x-2.7Content Construction Kit Project Content Construction Kit 6.x-2.8Content Construction Kit Project Content Construction Kit 6.x-2.1Content Construction Kit Project Content Construction Kit 6.x-2.3Content Construction Kit Project Content Construction Kit 6.x-2.2Content Construction Kit Project Content Construction Kit 6.x-2.4Content Construction Kit Project Content Construction Kit 6.x-2.9
NA
CVE-2009-1069
Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x prior to 6.x-2.2, a module for Drupal, allow remote malicious users to inject arbitrary web script or HTML via the (1) titles of candidate referenced nod...
Drupal Content Construction Kit 6.x-1.0Drupal Content Construction Kit 6.x-1.x-devDrupal Content Construction Kit 6.x-2.0Drupal Content Construction Kit 6.x-2.1
NA
CVE-2010-2353
The Node Reference module in Content Construction Kit (CCK) module 6.x prior to 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote malicious users to discover titles and IDs of controlled node...
Yves Chedemois Cck 6.x-2.6Yves Chedemois Cck 6.x-2.5Yves Chedemois Cck 6.x-2.0Yves Chedemois Cck 6.x-2.1Yves Chedemois Cck 6.x-2.3Yves Chedemois Cck 6.x-2.2Yves Chedemois Cck 6.x-1.x-devYves Chedemois Cck 6.x-2.4Yves Chedemois Cck 6.x-3.x-devYves Chedemois Cck 6.x-2.x-devYves Chedemois Cck 6.x-1.0-alpha
NA
CVE-2010-2352
The Node Reference module in Content Construction Kit (CCK) module 5.x prior to 5.x-1.11 and 6.x prior to 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote malicious users to read controlled nodes.
Yves Chedemois Cck 5.x-1.9Yves Chedemois Cck 5.x-1.8Karen Stevenson Cck 5.x-1.2Karen Stevenson Cck 5.x-1.1Karen Stevenson Cck 6.x-2.0Karen Stevenson Cck 5.x-1.7Yves Chedemois Cck 5.x-1.6-1Karen Stevenson Cck 6.x-2.6Karen Stevenson Cck 6.x-2.5Karen Stevenson Cck 5.x-1.xYves Chedemois Cck 5.x-1.10Karen Stevenson Cck 5.x-1.0Yves Chedemois Cck 5.x-1.4Karen Stevenson Cck 5.x-1.3Karen Stevenson Cck 6.x-2.2Karen Stevenson Cck 6.x-2.1Yves Chedemois Cck 5.x-1.6Yves Chedemois Cck 5.x-1.5Karen Stevenson Cck 6.x-2.4Karen Stevenson Cck 6.x-2.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073CVE-2024-5496CVE-2024-5495XPath injectionbypassCVE-2024-30043CVE-2024-24919denial of serviceCVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook