rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-0206 
Multiple cross-site scripting (XSS) vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) captcha_ttffolder, (2) captcha_numchars, (3) captcha_ttfrange, or (4) captcha_secret parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T00:00:00.000Z
CVE-2008-0207 
Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, or (8) show_page parameter to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T00:00:00.000Z
CVE-2008-0208 
Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T00:00:00.000Z
CVE-2008-0209 
Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T00:00:00.000Z
CVE-2008-0210 
Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting.  NOTE: this can be leveraged to conduct directory traversal attacks without authentication by using CVE-2008-0140.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T00:00:00.000Z
CVE-2008-0211 
Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-31T23:00:00.000Z
CVE-2008-0212 
ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP request that triggers an out-of-bounds memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0213 
Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T21:00:00.000Z
CVE-2008-0214 
Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to gain access via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-08T01:00:00.000Z
CVE-2008-0215 
Multiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM) before 6.0.0 allow remote attackers to obtain unspecified access to a managed device via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T01:00:00.000Z
CVE-2008-0216 
The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T01:00:00.000Z
CVE-2008-0217 
The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T01:00:00.000Z
CVE-2008-0218 
Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0219 
SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the id_actividad parameter, a different vector than CVE-2007-4920.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0220 
Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the (1) second or (2) fourth argument to the DoWebLaunch method.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0221 
Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ (dot dot backslash) in the second argument to the DoWebLaunch method.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0222 
Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0223 
Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute arbitrary code via a crafted .JTD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0224 
SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0225 
Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header function and related to disregarding the max field.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0226 
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0227 
yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a Hello packet containing a large size value, which triggers a buffer over-read in the HASHwithTransform::Update function in hash.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0228 
Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0229 
The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require authentication, which allows remote attackers on the local or wireless network to obtain administrative access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-10T23:00:00.000Z
CVE-2008-0230 
PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T00:00:00.000Z
CVE-2008-0231 
Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page parameter.  NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T00:00:00.000Z
CVE-2008-0232 
Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T00:00:00.000Z
CVE-2008-0233 
Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T02:00:00.000Z
CVE-2008-0234 
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T02:00:00.000Z
CVE-2008-0235 
The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T02:00:00.000Z
CVE-2008-0236 
An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T02:00:00.000Z
CVE-2008-0237 
The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T02:00:00.000Z
CVE-2008-0238 
Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmff_dump_header function, different vectors than CVE-2008-0225.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T21:00:00.000Z
CVE-2008-0239 
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T22:00:00.000Z
CVE-2008-0240 
/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T22:00:00.000Z
CVE-2008-0241 
Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T22:00:00.000Z
CVE-2008-0242 
Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0243 
Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0244 
SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec_sdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0245 
admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0246 
admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0247 
Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0248 
Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0249 
PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/mysqldump fails.  NOTE: this might only be an issue in limited environments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0250 
Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long Project line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0251 
Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0252 
Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arbitrary files, and possibly read and write portions of arbitrary files, via a crafted session id in a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-12T02:00:00.000Z
CVE-2008-0253 
SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands via the nid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0254 
SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0255 
SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0256 
Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) Imgbig.asp, (b) thumb.asp, and (c) thumbricerca.asp and the (2) ricerca parameter to (d) thumbricerca.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0257 
Cross-site scripting (XSS) vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0258 
Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0259 
Multiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) thumbcat and (2) thumb parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0260 
minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, which calls the phpinfo function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0261 
Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service (query flood) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0262 
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0263 
The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified call hold and send-only stream scenarios, which allows remote attackers to cause a denial of service (port exhaustion) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0264 
Unspecified vulnerability in the Meta Tags (aka Nodewords) 5.x-1.6 module for Drupal, when images are permitted in node bodies, allows remote authenticated users to execute arbitrary code via unspecified vectors involving creation of a node.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0265 
Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to (1) list_system.jsp, (2) list_pktfilter.jsp, (3) list_ltm.jsp, (4) resources_audit.jsp, and (5) list_asm.jsp in tmui/Control/jspmap/tmui/system/log/; and (6) list.jsp in certain directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0266 
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks.  NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0267 
Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters to search.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (4) msg and (5) password parameters to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0268 
Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0269 
Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0270 
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0271 
The editor deletion form in BUEditor 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.1, a module for Drupal, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete custom editor interfaces.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0272 
Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z