8 matches found
EUVD-2005-3820
Malware in sbrugna...
Comdev Vote Caster 3.1 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15563/info Comdev Vote Caster is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
CVE-2006-5101
CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...
Comdev Vote Caster 3.1 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Comdev Vote Caster 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Vote Caster 3.1 + Venedor ...........: http://www.comdevweb.com + Clas...
CVE-2005-3825
SQL injection vulnerability in index.php in Comdev Vote Caster 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the campaignid parameter in a result action...
CVE-2005-3825
The CVE-2005-3825 entry concerns a SQL injection in Comdev Vote Caster (version 3.1 and earlier) via the campaign_id parameter in a result action. The vulnerability allows remote attackers to execute arbitrary SQL commands, with the NVD listing a CVSSv2 base score of 7.5 (HIGH) and a network atta...
CVE-2005-3825
SQL injection vulnerability in index.php in Comdev Vote Caster 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the campaignid parameter in a result action...
Comdev Vote Caster 3.1 - 'index.php' SQL Injection
source: https://www.securityfocus.com/bid/15563/info Comdev Vote Caster is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of t...