WordPress Simply Poll Plugin 1.4.1 - Multiple Vulnerabilities

Simply Poll plugin is prone to a cross-site scripting and CSRF vulnerabilities. Solution After a email to [email protected], Simply Poll plugin was deleted...

WordPress Plugin Simply Poll 1.4.1 - Multiple Vulnerabilities

WordPress Plugin Simply Poll 1.4.1 - Multiple Vulnerabilities Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:"/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/...

MTP Poll 1.0 - Multiple Cross-Site Scripting Vulnerabilities

MTP Poll 1.0 - Multiple Cross-Site Scripting Vulnerabilities MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities alert1;' / alert2;' / input...

MTP Poll 1.0 - Multiple XSS Vulnerabilities

Exploit for php platform in category web applications MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities alert1;' / alert2;' / inpu...

WordPress Poll Plugin 'poll_id' Parameter SQL Injection

The WordPress Poll Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'pollid' parameter of the 'wp-admin/admin-ajax.php' script. An unauthenticated, remote attacker can leverage this issue to launch a...

MTP Poll 1.0 - Multiple Cross-Site Scripting Vulnerabilities

MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities alert1;' / alert2;' / input type="hidden" na...

MTP Poll 1.0 Cross Site Scripting

MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities alert1;' / alert2;' / inpu...

MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities

Summary More than poll is a polling system with a powerful administration tool. It features: multiple pools, templates, unlimited options, IP Logging, cookie support, and more. Description MTP Poll script suffers from multiple stored cross-site scripting vulnerabilities. The issues are triggered...

Ultra Light Forum - Persistent Cross-Site Scripting

Ultra Light Forum - Persistent Cross-Site Scripting Ultra Light Forum Persistant XSS Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/advisories/?id=86 Script: http://sourceforge.net/projects/ultralightforum/files/ Tested: Win 7 Description : Ultra Light Forum developed in...

Ultra Light Forum Cross Site Scripting

Ultra Light Forum Persistant XSS Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/advisories/?id=86 Script: http://sourceforge.net/projects/ultralightforum/files/ Tested: Win 7 Description : Ultra Light Forum developed in PHP and MySQL as a standalone forum with high speed...

Ultra Light Forum - Persistent Cross-Site Scripting

Ultra Light Forum Persistant XSS Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/advisories/?id=86 Script: http://sourceforge.net/projects/ultralightforum/files/ Tested: Win 7 Description : Ultra Light Forum developed in PHP and MySQL as a standalone forum with high speed...

CVE-2012-6518

Cross-site request forgery CSRF vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 question parameter to in /modules/poll/add.php or 2 question or 3 answer parameter to modules/poll/edit.php...

CVE-2012-6518

CVE-2012-6518 is a CSRF vulnerability affecting DiY-CMS 1.0, where mod.php allows attackers to hijack administrator authentication by crafting requests to the poll module’s add action. The issue arises from insufficient CSRF protections in the poll creation workflow, enabling unauthorized actions...

CVE-2012-6518

Cross-site request forgery CSRF vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module...

Cardoza WordPress Poll 34.05 SQL Injection

Exploit Title : Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin Author:Marcela Benetrix home:www.girlinthemiddle.net Date: 01/21/13 version: 34.05 software link:http://wordpress.org/extend/plugins/cardoza-wordpress-poll/ Wordpress Poll plugin description Wordpress Poll is...

WordPress Poll <= 34.05 - SQL Injection

The WordPress Poll WordPress plugin was affected by a SQL Injection security vulnerability...

CVE-2011-5211

Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...

Cross site scripting

Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...