Show filters
140 Total Results
Displaying 131-140 of 140
Sort by:
Attacker Value
Unknown
CVE-2009-0575
Disclosure Date: February 13, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to node titles. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2008-6020
Disclosure Date: February 02, 2009 (last updated October 04, 2023)
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."
0
Attacker Value
Unknown
CVE-2008-3669
Disclosure Date: August 13, 2008 (last updated October 04, 2023)
SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews) allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
0
Attacker Value
Unknown
CVE-2008-1783
Disclosure Date: April 15, 2008 (last updated October 04, 2023)
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php.
0
Attacker Value
Unknown
CVE-2007-1817
Disclosure Date: April 02, 2007 (last updated October 04, 2023)
SQL injection vulnerability in index.php in the Lykos Reviews (lykos_reviews) 1.00 module for Xoops allows remote attackers to execute arbitrary SQL commands via the uid parameter in a u action.
0
Attacker Value
Unknown
CVE-2002-0629
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server.
0
Attacker Value
Unknown
CVE-2002-0626
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.
0
Attacker Value
Unknown
CVE-2002-0630
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed ICMP packets.
0
Attacker Value
Unknown
CVE-2002-0627
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.
0
Attacker Value
Unknown
CVE-2002-0628
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
0
