2725 matches found
Scriptsez Ultimate Poll - 'demo_page.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43552/info Ultimate Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...
Authentication flaw
Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...
CVE-2008-6860
Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...
CVE-2008-6860
Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...
CVE-2008-6860
CVE-2008-6860 affects Xigla Software Absolute Poll Manager XE 4.1. The vulnerability is an authentication bypass: remote attackers can gain administrative access by setting a specific cookie value. This is documented across multiple sources (NVD/NVD duplicate entries, PRION, CVELIST). The provide...
CVE-2008-6860: Improper Authentication
Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...
Ultimate Poll Cross SIte Scripting
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
CJ Dynamic Poll 2.0 Remote File Inclusion Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + CJ Dynamic Poll 2.0 Remote File Inclusion Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : Cru3l.b0y...
Sql injection
SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arbitrary SQL commands via the PollID parameter...
CVE-2008-6853
SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arbitrary SQL commands via the PollID parameter...
CVE-2008-6853: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arbitrary SQL commands via the PollID parameter...
CVE-2008-6625
The CVE describes an SQL injection vulnerability in getin.php of WEBBDOMAIN Polls (Poll) 1.0 and 1.01, exploitable via the username parameter. The underlying issue is unsanitized user input allowing arbitrary SQL commands to be executed by remote attackers. Affected software is WEBBDOMAIN Polls, ...
Sql injection
SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6462
SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6462
The CVE-2008-6462 affects the TYPO3 extension “myquizpoll” prior to version 0.1.4. It is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as described in the public records. The connected sources confirm the vulnerability detail...
CVE-2008-6462: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-0295
SQL injection vulnerability in index.php in Information Technology Light Poll Information ITLPoll 2.7 Stable 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-0295: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Information Technology Light Poll Information ITLPoll 2.7 Stable 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in the CMS Poll system cmspoll extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...