Vulnerabilities > Karen Stevenson > CCK > 6.x.2.1

DATE CVE VULNERABILITY TITLE RISK
2010-06-21 CVE-2010-2352 Improper Input Validation vulnerability in multiple products
The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to read controlled nodes.
network
low complexity
karen-stevenson yves-chedemois drupal CWE-20
5.0