Логотип exploitDog
bind:CVE-2009-2076
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2009-2076

Количество 3

Количество 3

nvd логотип

CVE-2009-2076

около 16 лет назад

Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature. NOTE: vector 2 is only exploitable by users with administer views permissions.

CVSS2: 3.5
EPSS: Низкий
debian логотип

CVE-2009-2076

около 16 лет назад

Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, ...

CVSS2: 3.5
EPSS: Низкий
github логотип

GHSA-39m7-7p2w-vfpx

около 3 лет назад

Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature. NOTE: vector 2 is only exploitable by users with administer views permissions.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2009-2076

Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature. NOTE: vector 2 is only exploitable by users with administer views permissions.

CVSS2: 3.5
0%
Низкий
около 16 лет назад
debian логотип
CVE-2009-2076

Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, ...

CVSS2: 3.5
0%
Низкий
около 16 лет назад
github логотип
GHSA-39m7-7p2w-vfpx

Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature. NOTE: vector 2 is only exploitable by users with administer views permissions.

0%
Низкий
около 3 лет назад

Уязвимостей на страницу