Description
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."
References
- http://drupal.org/node/348321
- 32895 vdb-entry
- 33225 third-party-advisory
- 50795 vdb-entry
- FEDORA-2008-11519 vendor-advisory
- 33289 third-party-advisory
- http://drupal.org/node/347831
- views-cck-sql-injection(47454) vdb-entry