CVE-2008-6020 - SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."

Back Back to CVE browser

HIGH

SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."

Published Feb 2, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.33%

Description

SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (8)

http://drupal.org/node/347831
x_refsource_CONFIRM
http://drupal.org/node/348321
x_refsource_CONFIRMPatchVendor Advisory
http://osvdb.org/50795
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/33225
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/33289
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/32895
vdb-entryx_refsource_BIDPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/47454
vdb-entryx_refsource_XF
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01024.html
vendor-advisoryx_refsource_FEDORA

Link	Providers	Tags
http://drupal.org/node/347831		x_refsource_CONFIRM
http://drupal.org/node/348321		x_refsource_CONFIRMPatchVendor Advisory
http://osvdb.org/50795		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/33225		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/33289		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/32895		vdb-entryx_refsource_BIDPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/47454		vdb-entryx_refsource_XF
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01024.html		vendor-advisoryx_refsource_FEDORA

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 2, 2009

Updated Aug 7, 2024

Reserved Feb 2, 2009

Link CVE-2008-6020

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-6020

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-6020