SQL injection vulnerability in the Views module before 6.x-2.13 for Drupal allows remote attackers to execute arbitrary SQL commands via vectors related to "filters/arguments on certain types of views with specific configurations of arguments."
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2012-02-17 23:55
Updated : 2024-02-04 17:54
NVD link : CVE-2011-4113
Mitre link : CVE-2011-4113
CVE.ORG link : CVE-2011-4113
JSON object : View
Products Affected
drupal
- drupal
earl_miles
- views
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')