CVE-2008-5573

Poll Pro 2.0 contains an SQL injection vulnerability in the login feature, exploitable via the Password and username parameters. The root cause is improper input handling in the login routine, allowing remote attackers to execute arbitrary SQL commands. The vulnerability’s impact is partial confi...

Poll Pro 2.0 - Authentication Bypass

Poll Pro 2.0 - Authentication Bypass -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : PollPro Version : v2.0 download : null Demo : http://www.pollpro.com/pollpro2/ Exploits : --=SQ...

Poll Pro 2.0 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Poll Pro 2.0 Auth Bypass Remote SQL Injection Vulnerability =============================================================...

Poll Pro 2.0 SQL Injection

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : PollPro Version : v2.0 download : null Demo : http://www.pollpro.com/pollpro2/ Exploits : --=SQL INJECTION=-- AUTH BYPASS : username...

E.Z. Poll v.2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. E.Z. Poll Auth Bypass Remote SQL Injection Vulnerability author: !-BUGJACK-! Home: www.it-dark.com Download : http://www.aspin.com/func/review?tree=aspin/tutorial/applicat/voteques&id=4769410 Exploit : User: ' or 'a'='a Pass : ' or 'a'='a Login Demo...

E.Z. Poll 2 - Authentication Bypass

E.Z. Poll 2 - Authentication Bypass Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp...

ezpoll-sql.txt

E.Z. Poll Auth Bypass Remote SQL Injection Vulnerability author: !-BUGJACK-! Home: www.it-dark.com Download : http://www.aspin.com/func/review?tree=aspin/tutorial/applicat/voteques&id=4769410 Exploit : User: ' or 'a'='a Pass : ' or 'a'='a Login Demo http://boramusic.com/home/admin/login.asp Greet...

E.Z. Poll v.2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== E.Z. Poll v.2 Auth Bypass Remote SQL Injection Vulnerability ============================================================== Description: E.Z. Poll = v.2 script Remote SQL...

E.Z. Poll 2 - Authentication Bypass

Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp milw0rm.com 2008-12-01...

Ocean12 (Multiple Products) - Admin_ID SQL Injection

Ocean12 Multiple Products - AdminID SQL Injection source: https://www.securityfocus.com/bid/32527/info Multiple Ocean12 products are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

Ocean12 (Multiple Products) - 'Admin_ID' SQL Injection

source: https://www.securityfocus.com/bid/32527/info Multiple Ocean12 products are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit...

Ocean12 Poll Manager Pro Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Poll Manager Pro Version: 1.00 Vendor : http://ocean12tech.com/products/poll Dork: Maintained with the Ocean12 Poll Manager Pro v1.00 Author : PouyaServer , [email protected]...

Ocean12 Poll Manager Pro - Database Disclosure

Ocean12 Poll Manager Pro - Database Disclosure --------------------------------------------------------- Portal Name: Ocean12 Poll Manager Pro Version: 1.00 Vendor : http://ocean12tech.com/products/poll Dork: Maintained with the Ocean12 Poll Manager Pro v1.00 Author : PouyaServer ,...

Ocean12 Poll Manager Pro Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ocean12 Poll Manager Pro Database Disclosure Vulnerability ========================================================== --------------------------------------------------------- Port...

Ocean12 Poll Manager Pro - Database Disclosure

--------------------------------------------------------- Portal Name: Ocean12 Poll Manager Pro Version: 1.00 Vendor : http://ocean12tech.com/products/poll Dork: Maintained with the Ocean12 Poll Manager Pro v1.00 Author : PouyaServer , [email protected] Vulnerability : Database Disclosure...

CVE-2008-5129

Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12poll.mdb...

CVE-2008-5129

CVE-2008-5129 affects Ocean12 Poll Manager Pro 1.00. The issue is insufficient access control, with sensitive data stored under the web root and exposed via a direct request to o12poll.mdb. This enables partial disclosure of data to remote attackers. Exploitation details, affected versions beyond...

CVE-2008-5129

Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12poll.mdb...

Quick Poll Script (code.php id) Remote SQL Injection Vulnerability

No description provided by source. | | | Quick Poll code.php id Remote SQL Injection Vulnerability | | | | Author: Hussin X | | Home : http://www.iq-ty.com/ | | email: [email protected] | | | script :http://discountedscripts.com/productinfo.php?productsid=69 | | Exploit: Admin Name :...

Quick Poll Script - id SQL Injection

Quick Poll Script - id SQL Injection | | | Quick Poll code.php id Remote SQL Injection Vulnerability | | | | Author: Hussin X | | Home : http://www.iq-ty.com/ | | email: [email protected] | | | | | script :http://discountedscripts.com/productinfo.php?productsid=69 | | Exploit: Admin Name :...