2704 matches found
CVE-2007-5054: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to 1 search/search.php, 2 poll/inlinepoll.php, 3 poll/showpoll.php, 4 links/showlinks.php, or 5 links/submitlinks.php in...
Cross site scripting
Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-4630
Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-4630
Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-4630
The CVE-2007-4630 issue is an XSS vulnerability in the xlaapmview.asp component of Absolute Poll Manager XE 4.1, allowing remote attackers to inject arbitrary script/HTML via the msg parameter. Affected: Absolute Poll Manager XE 4.1 (xlaapmview.asp). Root cause: improper handling/sanitization of ...
CVE-2007-4630: Undefined Security Weakness
Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
PR07-23: Non-persistent Cross-site Scripting (XSS) on Absolute Poll Manager XE admin page
Date Found: 10th April 2007 Vendor informed: 4th July 2007 Successfully tested on: Absolute Poll Manager XE - Version 4.1. Earlier versions are possibly affected as well but have NOT been tested. Description: Absolute Poll Manager XE is vulnerable to a vanilla XSS within the...
Absolute Poll Manager XE 4.1 - 'xlaapmview.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/25492/info Absolute Poll Manager XE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting use...
Absolute Poll Manager XE 4.1 - xlaapmview.asp Cross-Site Scripting
Absolute Poll Manager XE 4.1 - xlaapmview.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/25492/info Absolute Poll Manager XE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an...
CVE-2007-3618: Undefined Security Weakness
Stack-based buffer overflow in the NetWorker Remote Exec Service nsrexecd.exe in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a 1 poll or 2 kill request with a "long invalid subcmd."...
CVE-2007-4339
Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter in 1 poll.php and 2 pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter in 1 poll.php and 2 pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable...
CVE-2007-4339
Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter in 1 poll.php and 2 pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable...
CVE-2007-4339
PHPCentral Poll Script 1.0 is affected by multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to execute arbitrary PHP code by supplying a URL to the _SERVER[DOCUMENT_ROOT] parameter in poll.php and pollarchive.php. The note attributes the underlying cause to a variab...
phpcpoll-rfi.txt
PHPCentral Poll Script Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : PHPCentral Poll Script Version : 1.0 Site : http://www.phpcentral.org/scripts.php Founder : Rizgar Contact : [email protected] and irc.gigachat.net...
PHPCentral Poll Script Remote Command Execution Vulnerability
PHPCentral Poll Script Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : PHPCentral Poll Script Version : 1.0 Site : http://www.phpcentral.org/scripts.php Founder : Rizgar Contact : [email protected] and irc.gigachat.net...
CVE-2007-4339: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter in 1 poll.php and 2 pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to 1 index.php, 2 vote.php, and 3 admin.php...