Description

The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors.

Remediation

References

CVE-2008-2771

Related Vulnerabilities

WordPress Plugin Advanced Contact form 7 DB SQL Injection (1.6.1)

WordPress Plugin Zoho CRM Lead Magnet Cross-Site Scripting (1.7.2.8)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (3.4.34)

WordPress Plugin Welcart e-Commerce Information Disclosure (2.2.7)

WordPress Plugin WordPress Landing Page-Squeeze Page-Responsive Landing Page Builder Free-WP Lead Plus X Multiple Vulnerabilities (0.98)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2008-2771