Authentication flaw

Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6860

Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6860

Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6860

CVE-2008-6860 affects Xigla Software Absolute Poll Manager XE 4.1. The vulnerability is an authentication bypass: remote attackers can gain administrative access by setting a specific cookie value. This is documented across multiple sources (NVD/NVD duplicate entries, PRION, CVELIST). The provide...

Ultimate Poll Cross SIte Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

CVE-2008-6860: Improper Authentication

Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CJ Dynamic Poll 2.0 Remote File Inclusion Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + CJ Dynamic Poll 2.0 Remote File Inclusion Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : Cru3l.b0y...

Sql injection

SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arbitrary SQL commands via the PollID parameter...

CVE-2008-6853

SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arbitrary SQL commands via the PollID parameter...

CVE-2008-6853: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arbitrary SQL commands via the PollID parameter...

CVE-2008-6625

The CVE describes an SQL injection vulnerability in getin.php of WEBBDOMAIN Polls (Poll) 1.0 and 1.01, exploitable via the username parameter. The underlying issue is unsanitized user input allowing arbitrary SQL commands to be executed by remote attackers. Affected software is WEBBDOMAIN Polls, ...

Sql injection

SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6462

SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6462

The CVE-2008-6462 affects the TYPO3 extension “myquizpoll” prior to version 0.1.4. It is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as described in the public records. The connected sources confirm the vulnerability detail...

CVE-2008-6462: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-0295

SQL injection vulnerability in index.php in Information Technology Light Poll Information ITLPoll 2.7 Stable 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0295: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Information Technology Light Poll Information ITLPoll 2.7 Stable 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5798

SQL injection vulnerability in the CMS Poll system cmspoll extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the CMS Poll system cmspoll extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-5798

The CVE-2008-5798 entry concerns the TYPO3 cms_poll extension (CMS Poll system) vulnerable to an SQL injection in versions before 0.1.1. The root cause is an SQL injection vulnerability in the cms_poll component, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors....