CVE-2008-6020 SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK tex...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal views | <= 6.x-2.1 | No fix listed |
| drupal views | = 6.x-2.0 | No fix listed |
References
- drupal.org
- drupal.org patch vendor-advisory
- 50795 vdb-entry
- 33225 third-party-advisory vendor-advisory
- 33289 third-party-advisory
- 32895 patch vdb-entry
- views-cck-sql-injection(47454) vdb-entry
- FEDORA-2008-11519 vendor-advisory