WordPress Simply Poll Plugin 1.4.1 - CSRF / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:"/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/ Software...

WordPress Simply Poll Plugin 1.4.1 - Multiple Vulnerabilities

Simply Poll plugin is prone to a cross-site scripting and CSRF vulnerabilities. Solution After a email to [email protected], Simply Poll plugin was deleted...

WordPress Poll Plugin 'poll_id' Parameter SQL Injection

The WordPress Poll Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'pollid' parameter of the 'wp-admin/admin-ajax.php' script. An unauthenticated, remote attacker can leverage this issue to launch a...

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download...

Vanilla Forums Poll Plugin 0.9 Stored XSS

Exploit for php platform in category web applications Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download...

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting

Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download http://vanillaforums.org/addon/poll-plugin Exploit-DB Note: User must have...