Views CVE-2010-4521 Cross-Site Scripting Vulnerability

Bugtraq ID:	73843
Class:	Input Validation Error
CVE:	CVE-2010-4521
Remote:	Yes
Local:	No
Published:	Dec 23 2010 12:00AM
Updated:	Dec 23 2010 12:00AM
Credit:	Unknown
Vulnerable:	Earl Miles Views 6.X-3.X Dev Earl Miles Views 6.X-3.0 Alpha3 Earl Miles Views 6.X-3.0 Alpha2 Earl Miles Views 6.X-3.0 Alpha1 Earl Miles Views 6.X-2.X Dev Earl Miles Views 6.X-2.9 Earl Miles Views 6.x-2.8 Earl Miles Views 6.X-2.7 Earl Miles Views 6.x-2.6 Earl Miles Views 6.X-2.5 Earl Miles Views 6.X-2.4 Earl Miles Views 6.X-2.3 Earl Miles Views 6.X-2.2 Earl Miles Views 6.x-2.11 Earl Miles Views 6.X-2.10 Earl Miles Views 6.X-2.1 Earl Miles Views 6.X-2.0 Rc5 Earl Miles Views 6.X-2.0 Rc4 Earl Miles Views 6.X-2.0 Rc3 Earl Miles Views 6.X-2.0 Rc2 Earl Miles Views 6.X-2.0 Rc1 Earl Miles Views 6.X-2.0 Beta4 Earl Miles Views 6.X-2.0 Beta3 Earl Miles Views 6.X-2.0 Beta2 Earl Miles Views 6.X-2.0 Beta1 Earl Miles Views 6.X-2.0 Alpha5 Earl Miles Views 6.X-2.0 Alpha4 Earl Miles Views 6.X-2.0 Alpha3 Earl Miles Views 6.X-2.0 Alpha2 Earl Miles Views 6.X-2.0 Alpha1 Earl Miles Views 6.x-2.0
Not Vulnerable:

Views CVE-2010-4521 Cross-Site Scripting Vulnerability

Views is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path.

Views CVE-2010-4521 Cross-Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Views CVE-2010-4521 Cross-Site Scripting Vulnerability

References:

• [SECURITY] Fedora 13 Update: drupal-views-6.x.2.12-1.fc13 (FEDORA)
  
• [SECURITY] Fedora 14 Update: drupal-views-6.x.2.12-1.fc14 (FEDORA)
  
• oss-security - CVE request: Drupal views module CSRF/XSS before 2.11, XSS before (MLIST)
  
• oss-security - Re: CVE request: Drupal views module CSRF/XSS before 2.11, XSS (MLIST)
  
• SA-CONTRIB-2010-111 - Views - Multiple Vulnerabilities (Drupal)