2160 matches found
CVE-2006-7136
Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...
CVE-2006-7135
PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...
CVE-2006-7135
CVE-2006-7135: Affects PHP Poll Creator (phpPC) 1.04; vulnerable component is lib/functions.inc.php. Remote PHP code execution possible via a URL in the relativer_pfad parameter. No explicit remediation or patch details are provided in the supplied documents. The connected sources do not reveal a...
Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile RCE. date: 30/07/06 diwou PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath cmd proxy: export...
Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile RCE. date: 30/07/06 diwou [email protected] PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath cmd proxy: export...
Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit
Exploit for unknown platform in category web applications ======================================================== Advanced Poll = 2.0.5-dev textfile RCE. date: 30/07/06 PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath c...
CVE-2007-0845
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...
Authentication flaw
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...
CVE-2007-0845
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...
CVE-2007-0845
CVE-2007-0845 affects Advanced Poll 2.0.0–2.0.5-dev, where admin/index.php can allow remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting uid=1. This entry provides the vulnerability description and base CVSS 2.0 score (7....
ap205-gen.txt
!/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 diwou PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use warnings; use LWP::UserAgent; use MD5; my...
Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass
The remote host is running Advanced Poll, a simple polling application written in PHP. The version of Advanced Poll installed on the remote host includes code to emulate PHP's 'registerglobals' functionality when that setting is disabled, which is true by default with recent versions of PHP. In...
Advanced Poll <= 2.0.5-dev Remote Admin Session Generator Exploit
Exploit for unknown platform in category web applications ================================================================= Advanced Poll = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use...
Flipper Poll 1.1.0 (poll.php root_path) Remote File Include Vulnerability
No description provided by source. Flipper Poll v1.1.0 poll.php remote file include vuln --------------------------------------------------------------------------------- Found: Cyber-Security cyber-security.org ---------------------------------------------------------------------------------...
Flipper Poll v1.1.0 (poll.php) remote file include vuln
Flipper Poll v1.1.0 poll.php remote file include vuln --------------------------------------------------------------------------------- Found: Cyber-Security cyber-security.org --------------------------------------------------------------------------------- Script Download:...
Flipper Poll 1.1.0 - poll.php?root_path Remote File Inclusion
Flipper Poll 1.1.0 - poll.php?rootpath Remote File Inclusion Flipper Poll v1.1.0 poll.php remote file include vuln --------------------------------------------------------------------------------- Found: Cyber-Security cyber-security.org...
Flipper Poll 1.1.0 (poll.php root_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================================= Flipper Poll 1.1.0 poll.php rootpath Remote File Include Vulnerability ========================================================================= Flipper Poll v1.1.0...
Flipper Poll 1.1.0 - 'poll.php?root_path' Remote File Inclusion
Flipper Poll v1.1.0 poll.php remote file include vuln --------------------------------------------------------------------------------- Found: Cyber-Security cyber-security.org --------------------------------------------------------------------------------- Script Download:...
CVE-2007-0312
The CVE-2007-0312 entry concerns wcSimple Poll where sensitive information is stored under the web root with insufficient access control, allowing remote attackers to obtain password hashes via a direct request for password.txt. Root cause: inadequate access restrictions on web-root files. Impact...
wcSimple Poll (password.txt) Remote Password Disclosure Vulnerablity
------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: wcSimple Poll Download: members.monarch.net/offsite/ZipFiles/wcPoll.zip Contact: ilker Kandemir ilkerkandemiratmynet.com...