Show filters
87 Total Results
Displaying 21-30 of 87
Sort by:
Attacker Value
Unknown
CVE-2013-4447
Disclosure Date: November 01, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via an email address.
0
Attacker Value
Unknown
CVE-2013-4719
Disclosure Date: June 27, 2013 (last updated October 05, 2023)
SQL injection vulnerability in the SEO Pack for tt_news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-3857
Disclosure Date: September 28, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Antisnews theme before 1.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
0
Attacker Value
Unknown
CVE-2010-1219
Disclosure Date: March 30, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2010-0334
Disclosure Date: January 15, 2010 (last updated October 04, 2023)
SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2009-3783
Disclosure Date: October 26, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vector.
0
Attacker Value
Unknown
CVE-2009-3784
Disclosure Date: October 26, 2009 (last updated October 04, 2023)
Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
0
Attacker Value
Unknown
CVE-2009-3785
Disclosure Date: October 26, 2009 (last updated October 04, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allow remote attackers to hijack the authentication of arbitrary users via unknown vectors.
0
Attacker Value
Unknown
CVE-2008-7172
Disclosure Date: September 08, 2009 (last updated October 04, 2023)
Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.
0
Attacker Value
Unknown
CVE-2008-7171
Disclosure Date: September 08, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) photo parameter to show_photo.php, (2) potd parameter to show_potd.php, or (3) the Current question field in a vote action to admin.php.
0
