medium4.3
CVE-2009-0575
Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x …
Impact
Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to node titles. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Views Bulk Operations | through 5.x-1.2 through 6.x-1.3 Versions 5.x-1.0, 5.x-1.0beta1, 5.x-1.0beta3, 5.x-1.0beta4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/369223
- http://osvdb.org/51751
- http://secunia.com/advisories/33836
- http://www.securityfocus.com/bid/33622
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48516
- http://drupal.org/node/369223
- http://osvdb.org/51751
- http://secunia.com/advisories/33836
- http://www.securityfocus.com/bid/33622
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48516