Views 7.x-3.5 for Drupal

CPE Details

Views 7.x-3.5 for Drupal
views_project
views
7.x-3.5
2019-06-18
15h24 +00:00
2019-06-18
15h24 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:views_project:views:7.x-3.5:*:*:*:*:drupal:*:*

Informations

Vendor

views_project

Product

views

Version

7.x-3.5

Target Software

drupal

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2015-5490 2015-08-18 15h00 +00:00 The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not rebuild the full cache if the static cache is not empty, which allows remote attackers to bypass intended filters and obtain access to hidden content via unspecified vectors.
5
CVE-2015-3379 2015-04-21 18h00 +00:00 The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configurations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
4
CVE-2015-3378 2015-04-21 16h00 +00:00 Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to the break lock page for edited views.
4.9
CVE-2013-1887 2013-03-27 23h00 +00:00 Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields.
2.1