WordPress UPM-POLLS 1.0.4 Blind SQL Injection

Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress 3.2.1,Firefox 4, XAMPP Info: Best Plugin to create Polls for yo...

Advanced Poll 2.02 SQL Injection

Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : “inurl:/db/admin intitle:Advanced Poll 2.02” + Category : Webapps + Severity : High +...

Advanced Poll 2.02 - SQL Injection

Advanced Poll 2.02 - SQL Injection + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Catego...

Advanced Poll 2.02 - SQL Injection

Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Category : Webapps + Severity : High +...

Advanced Poll 2.02 SQL Injection Vulnerability

Exploit for php platform in category web applications + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced...

CVE-2010-5004

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2010-5004

CVE-2010-5004 describes a SQL injection in searchvote.php of the 2daybiz Polls (Advanced Poll) Script, exploitable via the category parameter. Public sources (NVD/Red Hat PR/PRION/CVE lists) confirm the vulnerability and a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authent...

CVE-2010-5045

CVE-2010-5045 is an XSS vulnerability in Smart ASP Survey, specifically in poll/default.asp via the catid parameter. The root cause is lack of input validation/escaping enabling remote script injection. Impact described as script/HTML execution in the victim’s browser; exploitation details (paylo...

PT-2011-1939

Name of the Vulnerable Software and Affected Versions 2daybiz Polls aka Advanced Poll Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the category parameter in the searchvote.php file. This can lead to unauthorized access...

PT-2011-1980

Name of the Vulnerable Software and Affected Versions Smart ASP Survey affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the catid parameter in the "poll/default.asp"...

CVE-2010-5045: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-5004: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

PT-2011-1786

Name of the Vulnerable Software and Affected Versions Eclime version 1.1.2b Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ref or poll id parameter to "index.php", or the country parameter to "create account.php". Recommendations For...

PT-2011-4588

Name of the Vulnerable Software and Affected Versions AdaptCMS version 2.0.2 Beta Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as inc/poll vote.php, which reveals the installation path ...

kernel: IB/uverbs: Handle large number of entries in poll CQ

Integer overflow in the ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a large value of a certain structure member...

kernel: IB/uverbs: Handle large number of entries in poll CQ

The ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially fille...

Florida election center website hacked

Florida election center website hacked Another data breach at Florida, An anonymous hacker - known as Abhaxas - posted 14 pages of poll worker passwords and voter stats. Data posted here. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Florida election center website hacked

Florida election center website hacked Another data breach at Florida, An anonymous hacker - known as Abhaxas - posted 14 pages of poll worker passwords and voter stats. Data posted here. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

SUBRION CMS Cross Site Scripting / SQL Injection

1.SUBRION CMS multiple vulnerabilties vendor: www.subrion.com Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2011 Powered by Subrion CMS...

SUBRION CMS - Multiple Vulnerabilities

1.SUBRION CMS multiple vulnerabilties vendor: www.subrion.com Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2011 Powered by Subrion CMS...