CVE-2008-3310

CVE-2008-3310 describes an SQL injection in default.asp of the Pre Survey Poll application, exploitable via the catid parameter to execute arbitrary SQL commands remotely. The vulnerability is borne by the web application’s input handling, enabling an attacker to influence the underlying database...

Pre Survey Poll (default.asp catid) SQL Injection Vulnerability

No description provided by source. PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql :...

presurveypoll-sql.txt

PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql : http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users...

Pre Survey Poll - catid SQL Injection

Pre Survey Poll - catid SQL Injection PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql :...

Pre Survey Poll (default.asp catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Pre Survey Poll default.asp catid SQL Injection Vulnerability =============================================================== PRE SURVEY POLL Remote Sql Injection DreamTurk /...

Pre Survey Generator - default.asp SQL Injection

Pre Survey Generator - default.asp SQL Injection source: https://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

Pre Survey Generator - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

ClassWeb 2.0.3 (BASE) Remote File Inclusion Vulnerabilities

No description provided by source. ClassWeb = 2.03 Remote File Include Vulnerabilities D.Script: http://sourceforge.net/projects/classweb/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit:...

ClassWeb 2.0.3 (BASE) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== ClassWeb 2.0.3 BASE Remote File Inclusion Vulnerabilities =========================================================== ClassWeb = 2.03 Remote File Include Vulnerabilities D.Script:...

ClassWeb 2.0.3 - BASE Remote File Inclusion

ClassWeb 2.0.3 - BASE Remote File Inclusion ClassWeb = 2.03 Remote File Include Vulnerabilities D.Script: http://sourceforge.net/projects/classweb/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit:...

Nabopoll 1.2 (result.php surv) Remote Blind SQL Injection Exploit

No description provided by source. ? Nabopoll Blind SQL Injection P0C Exploit Download: www.nabocorp.com/nabopoll/ coded by s0cratex Contact: [email protected] errorreporting0; iniset"maxexecutiontime",0; // just change the default values... $srv = "localhost"; $path = "/poll"; $port = 80;...

Nabopoll 1.2 (result.php surv) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= Nabopoll 1.2 result.php surv Remote Blind SQL Injection Exploit ================================================================= 0day.today 2018-03-01...

nabopoll 1.2 (survey.inc.php path) Remote File Include Vulnerability

No description provided by source. By Cr@zyKing [email protected] Thakns : ApAci & Erne & Uyussman & Eno7 & Thehacker & CrackersChild & Liz0zim Script : nabopoll 1.x Risk : Remote File .nclude | High Site : http://nabocorp.com/ Google Dork : inurl:"nabopoll/" Exploit :...

nabopoll 1.2 - 'survey.inc.php?path' Remote File Inclusion

By Cr@zyKing [email protected] Thakns : ApAci & Erne & Uyussman & Eno7 & Thehacker & CrackersChild & Liz0zim Script : nabopoll 1.x Risk : Remote File .nclude | High Site : http://nabocorp.com/ Google Dork : inurl:"nabopoll/" Exploit : includeonce$path."includes/tags.inc.php";...

Authentication flaw

nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a direct request for 1 configedit.php, 2 templateedit.php, or 3 surveyedit.php in admin/...

CVE-2006-6194

Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6194

Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6194

The CVE-2006-6194 entry describes multiple SQL injection vulnerabilities in index.asp of Ultimate Survey Pro, allowing remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did parameters. Affected software: Ultimate Survey Pro (web component index.asp). Root cause: unsafely c...

aria-ultimate.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=38 ----------------------------------------------------------- Software: Ultimate Survey Pro. Vendor: fisasp.com Method: SQL Injection PoC: http://target/path/index.asp?cat=SQL INJECTION...

[Aria-Security Team] Ultimate Survey Pro SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=38 ----------------------------------------------------------- Software: Ultimate Survey Pro. Vendor: fisasp.com Method: SQL...