CVE-2007-0845

CVE-2007-0845 affects Advanced Poll 2.0.0–2.0.5-dev, where admin/index.php can allow remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting uid=1. This entry provides the vulnerability description and base CVSS 2.0 score (7....

Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass

The remote host is running Advanced Poll, a simple polling application written in PHP. The version of Advanced Poll installed on the remote host includes code to emulate PHP's 'registerglobals' functionality when that setting is disabled, which is true by default with recent versions of PHP. In...

CVE-2007-0845: Undefined Security Weakness

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...

ap205-gen.txt

!/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 diwou PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use warnings; use LWP::UserAgent; use MD5; my...

Advanced Poll <= 2.0.5-dev Remote Admin Session Generator Exploit

Exploit for unknown platform in category web applications ================================================================= Advanced Poll = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use...

Flipper Poll v1.1.0 &#40;poll.php&#41; remote file include vuln

Flipper Poll v1.1.0 poll.php remote file include vuln --------------------------------------------------------------------------------- Found: Cyber-Security cyber-security.org --------------------------------------------------------------------------------- Script Download:...

Flipper Poll 1.1.0 (poll.php root_path) Remote File Include Vulnerability

No description provided by source. Flipper Poll v1.1.0 poll.php remote file include vuln --------------------------------------------------------------------------------- Found: Cyber-Security cyber-security.org ---------------------------------------------------------------------------------...

Flipper Poll 1.1.0 - poll.php?root_path Remote File Inclusion

Flipper Poll 1.1.0 - poll.php?rootpath Remote File Inclusion Flipper Poll v1.1.0 poll.php remote file include vuln --------------------------------------------------------------------------------- Found: Cyber-Security cyber-security.org...

Flipper Poll 1.1.0 - 'poll.php?root_path' Remote File Inclusion

Flipper Poll v1.1.0 poll.php remote file include vuln --------------------------------------------------------------------------------- Found: Cyber-Security cyber-security.org --------------------------------------------------------------------------------- Script Download:...

Flipper Poll 1.1.0 (poll.php root_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Flipper Poll 1.1.0 poll.php rootpath Remote File Include Vulnerability ========================================================================= Flipper Poll v1.1.0...

CVE-2007-0312: Undefined Security Weakness

wcSimple Poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password hashes via a direct request for password.txt...

CVE-2007-0312

The CVE-2007-0312 entry concerns wcSimple Poll where sensitive information is stored under the web root with insufficient access control, allowing remote attackers to obtain password hashes via a direct request for password.txt. Root cause: inadequate access restrictions on web-root files. Impact...

wcSimple Poll &#40;password.txt&#41; Remote Password Disclosure Vulnerablity

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: wcSimple Poll Download: members.monarch.net/offsite/ZipFiles/wcPoll.zip Contact: ilker Kandemir ilkerkandemiratmynet.com...

wcsimple-disclose.txt

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: wcSimple Poll Download: members.monarch.net/offsite/ZipFiles/wcPoll.zip Contact: ilker Kandemir...

X-Scripts X-Poll Top.PHP SQL注入漏洞

X-Poll是一款基于PHP的投票程序。 X-Poll不正确处理用户提交的WEB数据，远程攻击者可以利用漏洞进行SQL注入获得敏感信息。 问题存在于'Top.PHP'脚本中，由于对用户提交的'poll'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 X-Scripts X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ http://www.example.com/poll/top.php?poll=' AND 0 UNION SELECT 0,...

PHP Poll Creator Relativer_PFAD远程文件包含漏洞

PHP Poll Creator是一款基于php的WEB应用程序。 PHP Poll Creator不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的'RelativerPFAD'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 php PC PHP Polling Creator 1.03 php PC PHP Poll Creator 1.0.1 php PC PHP Poll Creator 1.04 目前没有解决方案提供：...

phpPC 1.04 Multiples Remote File Inclusion

phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?php if $isphppcincluded != 1 include...

phpPC &lt;= 1.04 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?ph...

phpPC <= 1.04 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ phpPC = 1.04 Multiple Remote File Inclusion Vulnerabilities ============================================================ phpPC 1.04 Multiples Remote File Inclusion Script : PHP...

phpPC 1.04 - Multiple Remote File Inclusions

phpPC 1.04 - Multiple Remote File Inclusions phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php...