All the vulnerabilites related to karim_ratib - views_bulk_operations
Vulnerability from fkie_nvd
Published
2012-10-07 20:55
Modified
2024-11-21 01:22
Severity ?
Summary
Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| karim_ratib | views_bulk_operations | 6.x-1.0 | |
| karim_ratib | views_bulk_operations | 6.x-1.1 | |
| karim_ratib | views_bulk_operations | 6.x-1.2 | |
| karim_ratib | views_bulk_operations | 6.x-1.3 | |
| karim_ratib | views_bulk_operations | 6.x-1.4 | |
| karim_ratib | views_bulk_operations | 6.x-1.5 | |
| karim_ratib | views_bulk_operations | 6.x-1.6 | |
| karim_ratib | views_bulk_operations | 6.x-1.7 | |
| karim_ratib | views_bulk_operations | 6.x-1.8 | |
| karim_ratib | views_bulk_operations | 6.x-1.9 | |
| drupal | drupal | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A5B337BA-2904-4D32-BB31-4395FDE73E8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4F4D6AED-090F-4883-8140-1EF244757D59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3B467064-1F6E-4571-92A6-6AAA599382DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "CDE0970F-3691-4344-ADEB-75F02B694522",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "54E93443-9E9C-44D3-9B3F-70CAA28A9E23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "70B14BEA-01AD-4B04-8A80-F3E6C3C248F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "6DA88107-F52F-4D5E-AED6-7FDC25CD0194",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "A0A61CE1-AE82-4EB9-A53F-1B0FFC7AC911",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "76BD193B-10B3-44D3-B9E3-EADD1D5CF121",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.9:*:*:*:*:*:*:*",
"matchCriteriaId": "E644713B-A81A-421A-A6B4-8EC7422FFCFE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en el m\u00f3dulo Views Bulk Operations v6 antes de v6.x-1.10 para Drupal, permite a usuarios remotos autenticados con permisos de administraci\u00f3n de usuario evitar restricciones de acceso y eliminar usuarios an\u00f3nimos (usuarios 0) a trav\u00e9s de vectores no especificados."
}
],
"id": "CVE-2010-5277",
"lastModified": "2024-11-21T01:22:55.587",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 6.8,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2012-10-07T20:55:00.847",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://drupal.org/node/933596"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://drupal.org/node/933960"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/41696"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/43813"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://drupal.org/node/933596"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://drupal.org/node/933960"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/41696"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/43813"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2009-06-27 18:47
Modified
2024-11-21 01:04
Severity ?
Summary
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| drupal | drupal | * | |
| karim_ratib | views_bulk_operations | 5.x-1.0 | |
| karim_ratib | views_bulk_operations | 5.x-1.1 | |
| karim_ratib | views_bulk_operations | 5.x-1.2 | |
| karim_ratib | views_bulk_operations | 5.x-1.3 | |
| karim_ratib | views_bulk_operations | 6.x-1.0 | |
| karim_ratib | views_bulk_operations | 6.x-1.1 | |
| karim_ratib | views_bulk_operations | 6.x-1.2 | |
| karim_ratib | views_bulk_operations | 6.x-1.3 | |
| karim_ratib | views_bulk_operations | 6.x-1.4 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
"matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2449F487-D201-4013-B0D4-3D83265E7F56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "539260B1-1779-4020-9034-BF8E01D87652",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C8B77FCD-74E2-48E6-BEDD-702E7CAAF2FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "973F9818-ADD0-41C2-9F41-14346F3E5286",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A5B337BA-2904-4D32-BB31-4395FDE73E8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4F4D6AED-090F-4883-8140-1EF244757D59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3B467064-1F6E-4571-92A6-6AAA599382DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "CDE0970F-3691-4344-ADEB-75F02B694522",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "54E93443-9E9C-44D3-9B3F-70CAA28A9E23",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en Views Bulk Operations 5.x-1.x antes de 5.x-1.4 y 6.x-1.x ante de 6.x-1.7, un modulo para Drupal, permite a atacantes remotos evitar las restricciones de acceso previstas y modificar \"nodos o clases de nodos\" mediante vectores desconocidos, probablemente relacionado con procedimientos registrados (alias acciones)."
}
],
"id": "CVE-2009-2237",
"lastModified": "2024-11-21T01:04:27.043",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2009-06-27T18:47:59.203",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://drupal.org/node/468450"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35117"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://drupal.org/node/468450"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35117"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
cve-2010-5277
Vulnerability from cvelistv5
Published
2012-10-07 20:00
Modified
2024-08-07 04:17
Severity ?
EPSS score ?
Summary
Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors.
References
| ▼ | URL | Tags |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/62316 | vdb-entry, x_refsource_XF | |
| http://drupal.org/node/933960 | x_refsource_MISC | |
| http://secunia.com/advisories/41696 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.securityfocus.com/bid/43813 | vdb-entry, x_refsource_BID | |
| http://drupal.org/node/933596 | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:17:10.166Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/43813"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://drupal.org/node/933596"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2010-10-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/43813"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://drupal.org/node/933596"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-5277",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"name": "http://drupal.org/node/933960",
"refsource": "MISC",
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/43813"
},
{
"name": "http://drupal.org/node/933596",
"refsource": "CONFIRM",
"url": "http://drupal.org/node/933596"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-5277",
"datePublished": "2012-10-07T20:00:00",
"dateReserved": "2012-10-07T00:00:00",
"dateUpdated": "2024-08-07T04:17:10.166Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2009-2237
Vulnerability from cvelistv5
Published
2009-06-27 18:00
Modified
2024-08-07 05:44
Severity ?
EPSS score ?
Summary
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).
References
| ▼ | URL | Tags |
|---|---|---|
| http://drupal.org/node/468450 | x_refsource_CONFIRM | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/50659 | vdb-entry, x_refsource_XF | |
| http://www.securityfocus.com/bid/35051 | vdb-entry, x_refsource_BID | |
| http://secunia.com/advisories/35117 | third-party-advisory, x_refsource_SECUNIA |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:44:55.785Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35117"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35117"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-2237",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://drupal.org/node/468450",
"refsource": "CONFIRM",
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35117"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-2237",
"datePublished": "2009-06-27T18:00:00",
"dateReserved": "2009-06-27T00:00:00",
"dateUpdated": "2024-08-07T05:44:55.785Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}