Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Yves Chedemois Clear all filters
TI-2010-02259 CVE-2010-2353 · GHSA-3rcv-jp3w-f98g

The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for…

Priority LOW 26

The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote att…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01831 Published 2010-06-21 No fix listed CWE-264
TI-2008-06660 CVE-2008-6972 · GHSA-jrc3-h3rx-qxh4

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit…

Priority LOW 18

Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HT…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00868 Published 2009-08-13 No fix listed CWE-79