CVE-2026-6793

CVE-2026-6793 affects Q-smart NexT Poll by Bifra Engineering Consulting Ltd. The flaw is improper neutralization of input during web page generation, enabling Stored XSS in pages generated before version 1.8.7. CVSS 3.1 base score 5.4 (Medium) with NETWORK impact, LOW privileges, UI required, and...

PT-2026-61624

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bifra Engineering Consulting Ltd. Q-smart NexT Poll allows Stored XSS. This issue affects Q-smart NexT Poll: before 1.8.7...

EUVD-2005-4635

Malware in sbrugna...

Advanced Poll 2.02 SQL Injection Vulnerability

Exploit for php platform in category web applications + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced...

CVE-2005-4640

SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 pollid or 2 previouspoll parameters...

CVE-2005-4640

The CVE-2005-4640 entry describes a SQL injection vulnerability in index.php of class-1 Poll Software 0.4 and earlier. The underlying issue is that input parameters (pollid and previouspoll) can be crafted to alter SQL commands executed by the application. This enables remote attackers to potenti...

CVE-2005-4640: Undefined Security Weakness

SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 pollid or 2 previouspoll parameters...

class-1 Poll Software Multiple SQL Injection Vulnerabilities.

class-1 Poll Software Multiple SQL Injection Vulnerabilities. Author: r0t hackers.by.lv Date: 17 nov. 2005 Software:class-1 Poll Software v 0.4 Vendor:http://www.class1web.co.uk/ affected: v 0.4 and prior Description: Input passed to the "pollid" and "previouspoll" parameter in "index.php" isn't...