24 matches found
CVE-2013-6978
Cisco Unified Communications Manager (UCM) Disaster Recovery System (DRS) in 9.1(1) and earlier is affected. The root cause is extraneous information exposed in the web page HTML, allowing remote authenticated users to obtain sensitive device information. Exploitation requires authentication and ...
Dros RFI Vulnerability
No description provided by source. ======================================================================================== | Title : Dros RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IDE Group DVD Rental System DRS 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application servi...
CVE-2007-4193
CVE-2007-4193 covers multiple CSRF vulnerabilities in the IDE Group DVD Rental System (DRS) 5.1, reported for the request handler index.php. The issue enables remote attackers to perform actions as arbitrary users, demonstrated by (1) modifying data or (2) canceling a subscription. The root cause...