Vulnerabilities

TI-2010-02258 CVE-2010-2352 · GHSA-8wgh-rhq6-89pj

The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11…

LOW 28

The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02653 Published 2010-06-21 No fix listed CWE-20

TI-2008-06660 CVE-2008-6972 · GHSA-jrc3-h3rx-qxh4

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit…

LOW 18

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HT…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00868 Published 2009-08-13 No fix listed CWE-79

Vulnerabilities

Filters

The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11…

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit…