vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download...

Vanilla Forums 2.0.18.4 Poll 0.9 Stored Cross Site Scripting

Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download http://vanillaforums.org/addon/poll-plugin To create the XSS firstly create a...

Vanilla Forums Poll Plugin 0.9 Stored XSS

Exploit for php platform in category web applications Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download...

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting

Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download http://vanillaforums.org/addon/poll-plugin Exploit-DB Note: User must have...

Authentication flaw

GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...

PT-2012-2068 · Gr Board · Gboard

Name of the Vulnerable Software and Affected Versions: GR Board aka grboard version 1.8.6.5 Community Edition Description: The issue allows remote attackers to modify or delete data without requiring authentication for certain database actions. This can be achieved by sending a request to specifi...

Genium CMS 2012|Q2 Cross Site Scripting

Title: ====== Genium CMS 2012|Q2 - Multiple Web Vulnerabilities Date: ===== 2012-05-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=517 VL-ID: ===== 517 Introduction: ============= Durch den Einsatz von Genium CMS können Sie Ihre Homepage schnell und unabhängig von...

DIY CMS v1.0 Poll - Multiple Web Vulnerabilities

Document Title: =============== DIY CMS v1.0 Poll - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=518 Release Date: ============= 2012-04-26 Vulnerability Laboratory ID VL-ID: ==================================== 518 Produc...

Moderate: Red Hat Security Advisory: Red Hat Enterprise Linux 5.8 kernel update

Updated kernel packages that fix one security issue, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the eighth regular update. The Red Hat Security Response Team has rated...

Advanced Poll version <= 2.0.4 SQL-injection

Exploit for php platform in category web applications Exploit Title: Advanced Poll version 0 $this-db-fetcharray$this-db-query"SELECT pollid FROM ".$this-tbl'pollindex'." WHERE pollid=$pollid AND statusdb-record'pollid' ? true : false; else return false; Greetz to : forum.antichat.ru&rdot.org...

WordPress UPM-POLLS 1.0.4 Blind SQL Injection

Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress 3.2.1,Firefox 4, XAMPP Info: Best Plugin to create Polls for yo...

Advanced Poll 2.02 - SQL Injection

Advanced Poll 2.02 - SQL Injection + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Catego...

Advanced Poll 2.02 - SQL Injection

Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Category : Webapps + Severity : High +...

Advanced Poll 2.02 SQL Injection

Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : “inurl:/db/admin intitle:Advanced Poll 2.02” + Category : Webapps + Severity : High +...

Advanced Poll 2.02 SQL Injection Vulnerability

Exploit for php platform in category web applications + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced...

CVE-2010-5004

CVE-2010-5004 describes a SQL injection in searchvote.php of the 2daybiz Polls (Advanced Poll) Script, exploitable via the category parameter. Public sources (NVD/Red Hat PR/PRION/CVE lists) confirm the vulnerability and a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authent...

CVE-2010-5004

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2010-5045

CVE-2010-5045 is an XSS vulnerability in Smart ASP Survey, specifically in poll/default.asp via the catid parameter. The root cause is lack of input validation/escaping enabling remote script injection. Impact described as script/HTML execution in the victim’s browser; exploitation details (paylo...

kernel: IB/uverbs: Handle large number of entries in poll CQ

Integer overflow in the ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a large value of a certain structure member...

kernel: IB/uverbs: Handle large number of entries in poll CQ

The ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially fille...