2241 matches found
CVE-2006-4653
The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...
The Amazing Little Poll Admin Pwd
SOFTWARE ========= The Amazing Little Poll DESCRIPTION ============ google dork = "The Amazing Little Poll" and go to admin page /lpadmin.php default password dsapoll input to login admin or add to last path /lpsettings.inc and take administrator passwd $pwd="dsapoll"; ; create a new pol...
CVE-2006-4468
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the 1 mosMail, 2 JosIsValidEmail, and 3 josSpoofValue functions; 4 the lack of inclusion of globals.php in...
CVE-2006-4468
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the 1 mosMail, 2 JosIsValidEmail, and 3 josSpoofValue functions; 4 the lack of inclusion of globals.php in...
[KAPDA::#55] - Joomla poll component vulnerability
KAPDA New advisory Vendor: http://www.joomla.org Vulnerable: 1.0.10 prior versions also maybe Affected Bug: user session validation weakness Exploitation: Remote with browser Poc: available Description: -------------------- From vendora€™s website. Joomla! is an award-winning Content Management...
Joomla <=1.0.10 (poll component) Arbitrary Add Votes Exploit
No description provided by source. ?php Joomla poll component add unlimited votes Computer Security Researchers Institute works regardless of php.ini settings by trueend5 http://www.KAPDA.ir errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 2; obimplicitflush 1; echo...
Joomla! Component Poll 1.0.10 - Arbitrary Add Votes
Joomla! Component Poll 1.0.10 - Arbitrary Add Votes Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir hostname ex: www.sitename.com span class="Stil...
Joomla <=1.0.10 (poll component) Arbitrary Add Votes Exploit
Exploit for unknown platform in category web applications ============================================================ Joomla Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir form name="form1"...
Joomla! Component Poll 1.0.10 - Arbitrary Add Votes
Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir hostname ex: www.sitename.com path ex: /joomla...
xpoll110.txt
Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...
[Full-disclosure] X-Poll SQL Injection Vulnerability
Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...
CVE-2006-3960
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-3960
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-3960
The CVE-2006-3960 entry concerns a SQL injection in the X-Scripts X-Poll component, specifically in top.php (likely version 2.30). The vulnerability can be triggered via the poll parameter, enabling remote attackers to execute arbitrary SQL commands. Impact is listed as partial confidentiality/in...
X-Scripts X-Poll 1.10 - top.php SQL Injection
X-Scripts X-Poll 1.10 - top.php SQL Injection source: https://www.securityfocus.com/bid/19236/info X-Poll is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...
SolpotCrew Advisory #2 - Advanced Poll ver 2.02 (base_path) Remote File Inclusion
SolpotCrew Community Advanced Poll ver 2.02 basepath Remote File Inclusion Vendor site : http://www.proxy2.de/scripts.php Bug Found By :Solpot a.k.a k. Hasibuan contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-02.txt Greetz: choi , cow1seng , Ibnusina ,...
CVE-2006-3683
PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...
CVE-2006-3764
Till Gerken phpPolls 1.0.3 allows remote attackers to create a new poll via a direct request to phpPollAdmin.php3 with the pollaction parameter set to create...
Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19105/info Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file containing malicious script code...