2614 matches found
PT-2013-1982
Name of the Vulnerable Software and Affected Versions DiY-CMS version 1.0 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that create a poll via an add action to the poll module. Recommendations For DiY-CMS versi...
CVE-2012-6518: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module...
CVE-2012-6517: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 question parameter to in /modules/poll/add.php or 2 question or 3 answer parameter to modules/poll/edit.php...
CVE-2012-6519: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php...
Cardoza WordPress Poll 34.05 SQL Injection
Exploit Title : Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin Author:Marcela Benetrix home:www.girlinthemiddle.net Date: 01/21/13 version: 34.05 software link:http://wordpress.org/extend/plugins/cardoza-wordpress-poll/ Wordpress Poll plugin description Wordpress Poll is...
WordPress Poll <= 34.05 - SQL Injection
The WordPress Poll WordPress plugin was affected by a SQL Injection security vulnerability...
CVE-2011-5211
Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...
Cross site scripting
Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...
CVE-2011-5211
Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...
PT-2012-2188
Name of the Vulnerable Software and Affected Versions Subrion CMS version 2.0.4 Description A cross-site scripting XSS issue exists in the poll module, allowing remote attackers to inject arbitrary web script or HTML via the title field. Recommendations For Subrion CMS version 2.0.4, consider...
CVE-2011-5211: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...
Joomla JE Poll组件不明细节参数SQL注入漏洞
BUGTRAQ ID: 51229 CVECAN ID: CVE-2012-5101 Joomla!是一款开放源码的内容管理系统（CMS）。Joomla! JE Poll是Jommla 1.5、Joomla 1.6的一个组件、模块和插件，可将投票结果显示为动画。 Joomla JE Poll 1.1之前版本存在SQL注入漏洞，成功利用此漏洞可允许攻击者控制应用、访问或修改数据。 0 Joomla! JE Poll 1.0 厂商补丁： Joomla! ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.joomla.org/...
CVE-2012-5101
SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-5101
SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-5101
The affected software is Joomla! JE Poll component (before version 1.1). It has an SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The root cause is a flaw in JE Poll prior to 1.1 that enables injection and data access/modific...
Smart PHP Poll - CSRF/SQLi Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
CVE-2012-5101: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2012-5770
Name of the Vulnerable Software and Affected Versions JExtensions JE Poll component version 1.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For JExtensions JE Poll component version 1.0 and earlier, update to version 1.1 or later to...
