EUVD-2006-5576

Malware in sbrugna...

EUVD-2006-5577

Malware in sbrugna...

EUVD-2008-5951

Malware in sbrugna...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...

Improper access control

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, allowing remote attackers to download a database via direct requests to poll.mdb or poll97.mdb. Affected component: PacPoll 4.0 web files; root cause: improper access restrictions leading to exposure of ...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...

CVE-2008-5981: Undefined Security Weakness

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...

PacPoll 4.0 (poll.mdb/poll97.mdb) Database Disclosure Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script ...

PacPoll 4.0 - Database Disclosure

PacPoll 4.0 - Database Disclosure -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script :...

PacPoll 4.0 (poll.mdb/poll97.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== PacPoll 4.0 poll.mdb/poll97.mdb Database Disclosure Vulnerability ===================================================================...

PacPoll 4.0 - Database Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : PacPoll version : v4 download :...

pacpoll-disclose.txt

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : PacPoll version : v4 download :...

CVE-2006-5592

Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by setting the polllog cookie value to "xx"...

CVE-2006-5591

CVE-2006-5591 affects PacPoll 4.0 (and earlier). The vulnerability is SQL injection in Admin/check.asp, exploitable via the uid and pwd parameters, allowing remote attackers to execute arbitrary SQL commands. The affected component is the Admin/check.asp script in PacPoll 4.0 and earlier; root ca...

CVE-2006-5592

CVE-2006-5592 affects PacPoll 4.0 and earlier. The admin/adpoll.asp page allows remote attackers to bypass authentication by setting the polllog cookie value to "xx". This is a client-side cookie manipulation issue that enables unauthorized access to admin functionality. The linked sources confir...

CVE-2006-5592

Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by setting the polllog cookie value to "xx"...

CVE-2006-5592: Undefined Security Weakness

Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by setting the polllog cookie value to "xx"...

CVE-2006-5591: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Admin/check.asp in PacPoll 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameters...

[KAPDA::#61] - PacPoll <= 4.0 Multiple Vulnerabilities

KAPDA New advisory Vulnerable product : PacPoll = 4.0 Vendor: http://www.pacosdrivers.com/asp/poll/poll.asp Vulnerability: Admin Logon bypass , SQLInjection Date : -------------------- Found : 2006/10/10 Vendor Contacted : N/A Release Date : 2006/10/25 Vulnerabilities: -------------------- Admin...