46 matches found
CVE-2008-4633
CVE-2008-4633 affects the Drupal Node Vote module (5.x before 5.x-1.1 and 6.x before 6.x-1.0). The issue is a SQL injection in the module when “Allow user to vote again” is enabled, allowing remote authenticated users to execute arbitrary SQL via vectors related to a “previously cast vote.” Explo...
CVE-2007-4633
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) affect versions before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1. The issue allows remote attackers to inject arbitrary web script or HTML via ...
CVE-2006-4633
SoftBB 0.1 is affected; index.php can disclose installation path via a null/invalid page[] parameter. The root cause is improper handling of the page[] input leading to information disclosure. Impact is partial confidentiality leakage (installation path). No remediation details are provided in th...
