CVE-2013-5965

The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the hook_query_alter function, which might allow remote attackers to obtain sensitive information by reading a node listing.

🔗 References (10)

• cve@mitrehttp://archives.neohapsis.com/archives/bugtraq/2013-08/0184.html
• cve@mitrehttp://secunia.com/advisories/54550
• cve@mitrehttp://www.openwall.com/lists/oss-security/2013/09/11/9
• cve@mitrehttps://drupal.org/node/2031621
• cve@mitrehttps://drupal.org/node/2076315
• af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2013-08/0184.html
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/54550
• af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2013/09/11/9
• af854a3a-2127-422b-91ae-364da2661108https://drupal.org/node/2031621
• af854a3a-2127-422b-91ae-364da2661108https://drupal.org/node/2076315