Lucene search
+L

2725 matches found

zdt
zdt
•added 2012/06/07 12:00 a.m.•42 views

Advanced Poll v2.03 SQL / XSS Vulnerabilties

Exploit for php platform in category web applications Advanced Poll v2.03 Multiple Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.proxy2.de/ .:. Dork : "Powered by Advanced Poll Version...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2012/06/06 12:00 a.m.•66 views

RedHat Update for Red Hat Enterprise Linux 6.1 kernel RHSA-2011:0542-01

Check for the Version of Red Hat Enterprise Linux 6.1 kernel OpenVAS Vulnerability Test RedHat Update for Red Hat Enterprise Linux 6.1 kernel RHSA-2011:0542-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

7.2CVSS0.5AI score0.0389EPSS
SaveExploits6References2
OpenVAS
OpenVAS
•added 2012/06/06 12:00 a.m.•79 views

RedHat Update for Red Hat Enterprise Linux 6.1 kernel RHSA-2011:0542-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9CVSS8.2AI score0.0389EPSS
SaveExploits6References2
exploitpack
exploitpack
•added 2012/06/03 12:00 a.m.•20 views

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download...

SaveExploits0
Packet Storm
Packet Storm
•added 2012/06/03 12:00 a.m.•33 views

Vanilla Forums 2.0.18.4 Poll 0.9 Stored Cross Site Scripting

Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download http://vanillaforums.org/addon/poll-plugin To create the XSS firstly create a...

7.4AI score
SaveExploits0
zdt
zdt
•added 2012/06/03 12:00 a.m.•35 views

Vanilla Forums Poll Plugin 0.9 Stored XSS

Exploit for php platform in category web applications Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/06/03 12:00 a.m.•30 views

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting

Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download http://vanillaforums.org/addon/poll-plugin Exploit-DB Note: User must have...

5.3AI score
SaveExploits0
Prion
Prion
•added 2012/05/24 12:55 a.m.•30 views

Authentication flaw

GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...

6.4CVSS7.5AI score0.01286EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2012/05/24 12:00 a.m.•21 views

PT-2012-2068 · Gr Board · Gboard

Name of the Vulnerable Software and Affected Versions: GR Board aka grboard version 1.8.6.5 Community Edition Description: The issue allows remote attackers to modify or delete data without requiring authentication for certain database actions. This can be achieved by sending a request to specifi...

6.4CVSS7AI score0.01286EPSS
SaveExploits1References3
Packet Storm
Packet Storm
•added 2012/05/04 12:00 a.m.•46 views

Genium CMS 2012|Q2 Cross Site Scripting

Title: ====== Genium CMS 2012|Q2 - Multiple Web Vulnerabilities Date: ===== 2012-05-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=517 VL-ID: ===== 517 Introduction: ============= Durch den Einsatz von Genium CMS können Sie Ihre Homepage schnell und unabhängig von...

7.4AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2012/04/26 12:00 a.m.•44 views

DIY CMS v1.0 Poll - Multiple Web Vulnerabilities

Document Title: =============== DIY CMS v1.0 Poll - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=518 Release Date: ============= 2012-04-26 Vulnerability Laboratory ID VL-ID: ==================================== 518 Produc...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2012/02/21 2:25 a.m.•310 views

Moderate: Red Hat Security Advisory: Red Hat Enterprise Linux 5.8 kernel update

Updated kernel packages that fix one security issue, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the eighth regular update. The Red Hat Security Response Team has rated...

4.9CVSS7AI score0.00795EPSS
SaveExploits2References66
zdt
zdt
•added 2011/12/31 12:00 a.m.•49 views

Advanced Poll version <= 2.0.4 SQL-injection

Exploit for php platform in category web applications Exploit Title: Advanced Poll version 0 $this-db-fetcharray$this-db-query"SELECT pollid FROM ".$this-tbl'pollindex'." WHERE pollid=$pollid AND statusdb-record'pollid' ? true : false; else return false; Greetz to : forum.antichat.ru&rdot.org...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/12/11 12:00 a.m.•36 views

WordPress UPM-POLLS 1.0.4 Blind SQL Injection

Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress 3.2.1,Firefox 4, XAMPP Info: Best Plugin to create Polls for yo...

SaveExploits0
exploitpack
exploitpack
•added 2011/11/04 12:00 a.m.•25 views

Advanced Poll 2.02 - SQL Injection

Advanced Poll 2.02 - SQL Injection + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Catego...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/11/04 12:00 a.m.•36 views

Advanced Poll 2.02 SQL Injection

Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : “inurl:/db/admin intitle:Advanced Poll 2.02” + Category : Webapps + Severity : High +...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2011/11/04 12:00 a.m.•37 views

Advanced Poll 2.02 - SQL Injection

Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Category : Webapps + Severity : High +...

5.3AI score
SaveExploits0
zdt
zdt
•added 2011/11/03 12:00 a.m.•24 views

Advanced Poll 2.02 SQL Injection Vulnerability

Exploit for php platform in category web applications + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2011/11/02 9:00 p.m.•44 views

CVE-2010-5004

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

8.4AI score0.00907EPSS
SaveExploits2References2
CVE
CVE
•added 2011/11/02 9:00 p.m.•77 views

CVE-2010-5004

CVE-2010-5004 describes a SQL injection in searchvote.php of the 2daybiz Polls (Advanced Poll) Script, exploitable via the category parameter. Public sources (NVD/Red Hat PR/PRION/CVE lists) confirm the vulnerability and a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authent...

7.5CVSS6.6AI score0.00907EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder