CVE-2010-5045

CVE-2010-5045 is an XSS vulnerability in Smart ASP Survey, specifically in poll/default.asp via the catid parameter. The root cause is lack of input validation/escaping enabling remote script injection. Impact described as script/HTML execution in the victim’s browser; exploitation details (paylo...

CVE-2010-5045: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-5004: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

PT-2011-1939

Name of the Vulnerable Software and Affected Versions 2daybiz Polls aka Advanced Poll Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the category parameter in the searchvote.php file. This can lead to unauthorized access...

PT-2011-1980

Name of the Vulnerable Software and Affected Versions Smart ASP Survey affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the catid parameter in the "poll/default.asp"...

PT-2011-1786

Name of the Vulnerable Software and Affected Versions Eclime version 1.1.2b Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ref or poll id parameter to "index.php", or the country parameter to "create account.php". Recommendations For...

PT-2011-4588

Name of the Vulnerable Software and Affected Versions AdaptCMS version 2.0.2 Beta Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as inc/poll vote.php, which reveals the installation path ...

kernel: IB/uverbs: Handle large number of entries in poll CQ

Integer overflow in the ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a large value of a certain structure member...

kernel: IB/uverbs: Handle large number of entries in poll CQ

The ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially fille...

Florida election center website hacked

Florida election center website hacked Another data breach at Florida, An anonymous hacker - known as Abhaxas - posted 14 pages of poll worker passwords and voter stats. Data posted here. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Florida election center website hacked

Florida election center website hacked Another data breach at Florida, An anonymous hacker - known as Abhaxas - posted 14 pages of poll worker passwords and voter stats. Data posted here. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

SUBRION CMS Cross Site Scripting / SQL Injection

1.SUBRION CMS multiple vulnerabilties vendor: www.subrion.com Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2011 Powered by Subrion CMS...

SUBRION CMS - Multiple Vulnerabilities

1.SUBRION CMS multiple vulnerabilties vendor: www.subrion.com Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2011 Powered by Subrion CMS...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux 6.1 kernel security, bug fix and enhancement update

Updated kernel packages that fix multiple security issues, address several hundred bugs and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the first regular update. The Red Hat Security Response Team has...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise MRG 1.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Nuke_Evolution_Xtreme <= 2.0 (SQLi/LFI) Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Nuke Evolution Xtreme 2.0 SQL Injection / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

PhoenixCMS 1.7.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

THN Poll : WikiLeaks will win Nobel Peace Prize ?

WikiLeaks is among the 241 Nobel Peace Prize nominees this year. The nominees come from 53 organizations and are greater in number than in any previous year. Read More Here. Nobel-watcher and Peace Research Institute Oslo Director Kristian Berg Harpviken says he is not surprised WikiLeaks has bee...

Web Poll Pro 1.0.3 Cross Site Scripting

Product: Web Poll Pro Vendor: http://www.got.my Vulnerable Version: 1.0.3 and probably prior versions Vulnerability Type: Stored XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...