94 matches found
Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit
Exploit for unknown platform in category web applications ======================================================== Advanced Poll = 2.0.5-dev textfile RCE. date: 30/07/06 PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath c...
Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile RCE. date: 30/07/06 diwou [email protected] PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath cmd proxy: export...
CVE-2007-0845
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...
Authentication flaw
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...
CVE-2007-0845
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...
CVE-2007-0845
CVE-2007-0845 affects Advanced Poll 2.0.0–2.0.5-dev, where admin/index.php can allow remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting uid=1. This entry provides the vulnerability description and base CVSS 2.0 score (7....
Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass
The remote host is running Advanced Poll, a simple polling application written in PHP. The version of Advanced Poll installed on the remote host includes code to emulate PHP's 'registerglobals' functionality when that setting is disabled, which is true by default with recent versions of PHP. In...
ap205-gen.txt
!/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 diwou PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use warnings; use LWP::UserAgent; use MD5; my...
Advanced Poll <= 2.0.5-dev Remote Admin Session Generator Exploit
Exploit for unknown platform in category web applications ================================================================= Advanced Poll = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use...
Advanced Poll 2.0.7 Remote File Include Vulnerability
Advanced Poll Advanced Poll 2.0.7 Remote File Include Vulnerability Found by: beks Bug in booth.php captcha.php comments.php png.php www.site.com/path/booth.php?includepath=shell www.site.com/path/captcha.php?includepath=shell www.site.com/path/comments.php?includepath=shell...
advancedpoll202.txt
+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...
Advanced Poll v2.02 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...
SolpotCrew Advisory #2 - Advanced Poll ver 2.02 (base_path) Remote File Inclusion
SolpotCrew Community Advanced Poll ver 2.02 basepath Remote File Inclusion Vendor site : http://www.proxy2.de/scripts.php Bug Found By :Solpot a.k.a k. Hasibuan contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-02.txt Greetz: choi , cow1seng , Ibnusina ,...
Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19105/info Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file containing malicious script code...
CVE-2006-2131
include/classpoll.php in Advanced Poll 2.0.4 uses the HTTPXFORWARDEDFOR X-Forwarded-For HTTP header to identify the IP address of a client, which makes it easier for remote attackers to spoof the source IP and bypass voting restrictions...
Sql injection
SQL injection vulnerability in include/classpoll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...
CVE-2006-2130
SQL injection vulnerability in include/classpoll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...
CVE-2006-2130
SQL injection vulnerability in include/classpoll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...
CVE-2006-2131
The CVE-2006-2131 entry concerns Advanced Poll 2.0.4, where include/class_poll.php uses the HTTP_X_FORWARDED_FOR header to identify the client IP. The root cause is relying on X-Forwarded-For for IP checks, which allows remote attackers to spoof the source IP and bypass voting restrictions. The a...
CVE-2006-2130
The CVE-2006-2130 entry concerns a SQL injection vulnerability in Advanced Poll 2.0.4, exploitable through the User-Agent HTTP header in include/class_poll.php. The connected documents confirm affected software and the root cause is improper handling of User-Agent data, enabling remote attackers ...