Lucene search
+L

50 matches found

NVD
NVD
added 2014/01/21 4:6 p.m.48 views

CVE-2013-7219

SQL injection vulnerability in vote.php in the 2Glux Sexy Polling comsexypolling component before 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the answerid parameter...

7.5CVSS8.3AI score0.02289EPSS
SaveExploits4References4
CVE
CVE
added 2014/01/21 4:0 p.m.81 views

CVE-2013-7219

CVE-2013-7219 affects the Joomla! Sexy Polling extension (com_sexypolling) by 2GLux. The vulnerability is an SQL injection in vote.php caused by insufficient validation of the POST parameter answer_id[]. This allows remote attackers to execute arbitrary SQL commands against the application's data...

7.5CVSS8.5AI score0.02289EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
added 2014/01/21 4:0 p.m.53 views

CVE-2013-7219

SQL injection vulnerability in vote.php in the 2Glux Sexy Polling comsexypolling component before 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the answerid parameter...

8.3AI score0.02289EPSS
SaveExploits4References4
securityvulns
securityvulns
added 2014/01/19 12:0 a.m.111 views

SQL Injection in Sexy Polling Joomla Extension

Advisory ID: HTB23193 Product: Sexy Polling Joomla Extension Vendor: 2GLux Vulnerable Versions: 1.0.8 and probably prior Tested Version: 1.0.8 Advisory Publication: December 26, 2013 without technical details Vendor Notification: December 26, 2013 Vendor Patch: January 8, 2014 Public Disclosure:...

7.5CVSS8.1AI score0.02289EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2014/01/16 12:0 a.m.74 views

Joomla Sexy Polling 1.0.8 SQL Injection

Advisory ID: HTB23193 Product: Sexy Polling Joomla Extension Vendor: 2GLux Vulnerable Versions: 1.0.8 and probably prior Tested Version: 1.0.8 Advisory Publication: December 26, 2013 without technical details Vendor Notification: December 26, 2013 Vendor Patch: January 8, 2014 Public Disclosure:...

7.5CVSS0.5AI score0.02289EPSS
SaveExploits4
Circl
Circl
added 2014/01/16 12:0 a.m.34 views

CVE-2013-7219

creationtimestamp| type| source ---|---|--- 2014-01-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39028...

7.5CVSS6.8AI score0.02289EPSS
SaveExploits4References1
CVE
CVE
added 2009/09/13 10:0 p.m.65 views

CVE-2008-7219

CVE-2008-7219 affects Horde Kronolith H3 (2.1 up to before 2.1.7; 2.2 before 2.2-RC2), Nag H3 (2.1 before 2.1.4; 2.2 before 2.2-RC2), Mnemo H3 (2.1 before 2.1.2; 2.2 before 2.2-RC2), Groupware (1.0 before 1.0.3; 1.1 before 1.1-RC2) and Groupware Webmail Edition (1.0 before 1.0.4; 1.1 before 1.1-R...

10CVSS6.7AI score0.02744EPSS
SaveExploits0References13Affected Software5
OpenVAS
OpenVAS
added 2009/02/16 12:0 a.m.20 views

Fedora Update for kronolith FEDORA-2008-2212

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

10CVSS6.8AI score0.02744EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2008/03/07 12:0 a.m.22 views

Fedora 7 : kronolith-2.1.7-1.fc7 (2008-2212)

Fix privilege escalation in Horde API. Fix missing ownership validation on share changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

10CVSS5.4AI score0.02744EPSS
SaveExploits0References3
CVE
CVE
added 2007/07/06 7:0 p.m.47 views

CVE-2006-7219

The CVE concerns eZ Publish before 3.8.5 where permissions for editing in a specific language are not properly enforced. This allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, then using Manage Versions to copy that versio...

4CVSS6.3AI score0.00982EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder