Advanced Poll 2.02 SQL Injection Vulnerability

Exploit for php platform in category web applications + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced...

CVE-2010-5004

CVE-2010-5004 describes a SQL injection in searchvote.php of the 2daybiz Polls (Advanced Poll) Script, exploitable via the category parameter. Public sources (NVD/Red Hat PR/PRION/CVE lists) confirm the vulnerability and a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authent...

CVE-2010-5004

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in misc/getadmin.php in Advanced Poll 2.08 allows remote attackers to inject arbitrary web script or HTML via the mysqlhost parameter...

CVE-2010-2003

Cross-site scripting XSS vulnerability in misc/getadmin.php in Advanced Poll 2.08 allows remote attackers to inject arbitrary web script or HTML via the mysqlhost parameter...

CVE-2010-2003

The CVE-2010-2003 issue affects Advanced Poll 2.08, specifically the misc/get_admin.php script. A sanitation flaw in the mysql_host parameter enables cross-site scripting (XSS), allowing an attacker to inject arbitrary HTML/JavaScript into a victim’s browser. Exploitation details in HTBridge advi...

CVE-2010-2003

Cross-site scripting XSS vulnerability in misc/getadmin.php in Advanced Poll 2.08 allows remote attackers to inject arbitrary web script or HTML via the mysqlhost parameter...

XSS vulnerability in Advanced Poll

Vulnerability ID: HTB22358 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinadvancedpoll.html Product: Advanced Poll Vendor: Chi Kien Uong Vulnerable Version: 2.08 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in EasyPublish CMS

Vulnerability ID: HTB22358 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinadvancedpoll.html Product: Advanced Poll Vendor: Chi Kien Uong Vulnerable Version: 2.08 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in Advanced Poll

Vulnerability ID: HTB22358 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinadvancedpoll.html Product: Advanced Poll Vendor: Chi Kien Uong Vulnerable Version: 2.08 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

Advanced Poll 2.08 Cross Site Scripting

Vulnerability ID: HTB22358 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinadvancedpoll.html Product: Advanced Poll Vendor: Chi Kien Uong Vulnerable Version: 2.08 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

Advanced Poll 2.0 - mysql_host Cross-Site Scripting

Advanced Poll 2.0 - mysqlhost Cross-Site Scripting source: https://www.securityfocus.com/bid/40045/info Advanced Poll is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in indexsearch.php in 2daybiz Polls aka Advanced Poll Script allow remote attackers to inject arbitrary web script or HTML via the 1 category parameter or 2 search field...

Sql injection

Multiple SQL injection vulnerabilities in 2daybiz Polls aka Advanced Poll Script allow remote attackers to execute arbitrary SQL commands via 1 the password field to login.php, 2 the login field aka email parameter to login.php, 3 the password field aka pass parameter to the default URI under...

CVE-2010-1704

CVE-2010-1704 corresponds to multiple SQL injection vulnerabilities in the 2daybiz Polls (aka Advanced Poll) Script. The affected component is the server-side login and admin interfaces of the script, where user-supplied input in specific fields can be manipulated to alter SQL commands. Specifica...

CVE-2010-1703

Multiple cross-site scripting XSS vulnerabilities in indexsearch.php in 2daybiz Polls aka Advanced Poll Script allow remote attackers to inject arbitrary web script or HTML via the 1 category parameter or 2 search field...

Cross-site Scripting (XSS) Vulnerability in Advanced Poll

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Advanced Poll which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Advanced Poll: CVE-2010-2003 An input sanitation error was found in the "mysqlhost" parameter in...

Advanced Poll 2.02 Cross Site Scripting

======================================================================================== | Title : Advanced Poll 2.02 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site...

Advanced Poll 2.02 XSS Vulnerability

No description provided by source. ======================================================================================== | Title : Advanced Poll 2.02 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi -...

Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile RCE. date: 30/07/06 diwou PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath cmd proxy: export...