Dream Poll 3.1 - '/index.php' Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/36663/info Dream Poll is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modi...

CVE-2009-3601

Cross-site scripting XSS vulnerability in demopage.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action...

Cross site scripting

Cross-site scripting XSS vulnerability in demopage.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action...

CVE-2009-3596

JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request...

CVE-2009-3596

JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request...

CVE-2009-3601

Cross-site scripting XSS vulnerability in demopage.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action...

CVE-2009-3596

CVE-2009-3596 affects JoxTechnology Ajox Poll. The vulnerability is an access-control flaw where an attacker can bypass authentication and obtain administrative access by requesting admin/managepoll.php directly. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network vector and low a...

CVE-2009-3601

CVE-2009-3601 is an XSS vulnerability in Scriptsez Ultimate Poll, specifically in demo_page.php where the clr parameter in a vote action can be exploited to inject arbitrary script or HTML. The NVD entry documents a medium base score (CVSS2 4.3) with network attack vector and no confidentiality i...

CVE-2009-3509

Cross-site scripting XSS vulnerability in admin/adminindex.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/adminindex.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-3509

Cross-site scripting XSS vulnerability in admin/adminindex.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-3509

CVE-2009-3509 affects CJ Dynamic Poll PRO 2.0, specifically the admin/admin_index.php component. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO, indicating insufficient input handling for path information. T...

CVE-2009-3118

The CVE-2009-3118 entry concerns Danneo CMS

Cross site scripting

Cross-site scripting XSS vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the languagesetup parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-7141

Cross-site scripting XSS vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the languagesetup parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-7141

CVE-2008-7141 is an XSS vulnerability in the setup.php file of @lex Poll 2.1, exploitable through the language_setup parameter to inject arbitrary web script or HTML. The connected documents confirm the vulnerability but do not provide exploit details, specific affected versions beyond @lex Poll ...

Authentication flaw

AJ Square Free Polling Script AJPoll Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php...

Mob Poll Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

CJ Dynamic Poll Pro 2.0 - admin_index.php Cross-Site Scripting

CJ Dynamic Poll Pro 2.0 - adminindex.php Cross-Site Scripting source: www.securityfocus.com/bid/43498/info CJ Dynamic Poll Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

CJ Dynamic Poll 2.0 Pro XSS

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...