CVE

Id
39672  
CVE No.
CVE-2009-2237  
Status
Candidate  
Description
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).  
Phase
Assigned (20090627)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436213 39672 CVE-2009-2237 CONFIRM:http://drupal.org/node/468450  View
436214 39672 CVE-2009-2237 BID:35051  View
436215 39672 CVE-2009-2237 URL:http://www.securityfocus.com/bid/35051  View
436216 39672 CVE-2009-2237 SECUNIA:35117  View
436217 39672 CVE-2009-2237 URL:http://secunia.com/advisories/35117  View
436218 39672 CVE-2009-2237 XF:viewsbulk-unspecified-security-bypass(50659)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42550 JVNDB-2009-003557 ASP Inline Corporate Calendar の search.asp におけるクロスサイトスクリプティングの脆弱性 ASP Inline Corporate Calendar の search.asp には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2241 39672 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003557.html  View