Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2018-7057

Disclosure Date: February 15, 2018 (last updated November 26, 2024)
RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.
0
0
Attacker Value
Unknown

CVE-2018-7056

Disclosure Date: February 15, 2018 (last updated November 26, 2024)
RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.
0
0
Attacker Value
Unknown

CVE-2018-7055

Disclosure Date: February 15, 2018 (last updated November 26, 2024)
GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.
0
0
Attacker Value
Unknown

CVE-2011-0423

Disclosure Date: January 12, 2011 (last updated October 04, 2023)
The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than CVE-2010-0214.
0
0
Attacker Value
Unknown

CVE-2010-0214

Disclosure Date: January 12, 2011 (last updated October 04, 2023)
The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI.
0
0