Sql injection

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the pollid parameter in a poll action...

CVE-2008-2036

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the pollid parameter in a poll action...

CVE-2008-2036: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the pollid parameter in a poll action...

CVE-2007-0535: Undefined Security Weakness

Multiple eval injection vulnerabilities in Vote! Pro 4.0, and possibly earlier, allow remote attackers to execute arbitrary code via requests to unspecified PHP scripts with the pollid parameter, which is supplied to eval function calls, a different set of vectors than CVE-2007-0504. NOTE: The...

CVE-2007-0504: Undefined Security Weakness

Eval injection vulnerability in pollframe.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to execute arbitrary code via the pollid parameter, which is supplied to an eval function call, a different vulnerability type than CVE-2005-4632...

EUVD-2007-0502

Eval injection vulnerability in pollframe.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to execute arbitrary code via the pollid parameter, which is supplied to an eval function call, a different vulnerability type than CVE-2005-4632...

CVE-2006-5879: Undefined Security Weakness

SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the PollID parameter, a different vector than CVE-2006-1353...

CVE-2006-0444: Undefined Security Weakness

SQL injection vulnerability in index.php in Phpclanwebsite aka PCW 1.23.1 allows remote attackers to execute arbitrary SQL commands via the 1 par parameter in the post function on the forum page and possibly the 2 pollid parameter on the poll page. NOTE: the pollid vector can also allow resultant...

CVE-2005-4632: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pollframe.php in Vote! Pro 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pollid parameter...

CVE-2005-4632

SQL injection vulnerability in pollframe.php in Vote! Pro 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pollid parameter...

Vote! Pro 4.x "poll_id" Sql inj.

Vote! Pro 4.x "pollid" Sql inj. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/vote-pro-4x-pollid-sql-inj.html Vendor: Shedix.com Product link: http://www.vote-pro.com/ affected version: 4.x and prior. Product Description: Vote! Pro 4.0 is php...