2241 matches found
CVE-2005-1755
PHP remote file inclusion vulnerability in pollvote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativerpfad parameter...
WebWiz Products 1.03.06 - Authentication Bypass SQL Injection
WebWiz Products 1.03.06 - Authentication Bypass SQL Injection WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda s advisory Discovery and exploit by devilbox at kapda.ir Kapda - Security Science Researchers Institute of Iran WebWiz Login Bypass PoC - Database login - Kapd...
DreamLevels Dream Poll 3.0 - View_Results.php SQL Injection
DreamLevels Dream Poll 3.0 - ViewResults.php SQL Injection source: https://www.securityfocus.com/bid/15849/info Dream Poll is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
DreamLevels Dream Poll 3.0 - 'View_Results.php' SQL Injection
source: https://www.securityfocus.com/bid/15849/info Dream Poll is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
CVE-2005-3742
CVE-2005-3742 describes a cross-site scripting (XSS) vulnerability in the popup.php component of Advanced Poll 2.0.3 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter. The vulnerability affects the affected Poll software as document...
CVE-2005-3742
Cross-site scripting XSS vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the pollident parameter...
Advanced Poll 2.0.22.0.3 - popup.php Cross-Site Scripting
Advanced Poll 2.0.22.0.3 - popup.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15506/info Advanced Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
class-1 Poll Software Multiple SQL Injection Vulnerabilities.
class-1 Poll Software Multiple SQL Injection Vulnerabilities. Author: r0t hackers.by.lv Date: 17 nov. 2005 Software:class-1 Poll Software v 0.4 Vendor:http://www.class1web.co.uk/ affected: v 0.4 and prior Description: Input passed to the "pollid" and "previouspoll" parameter in "index.php" isn't...
CVE-2002-2197
Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service kernel panic via a program that uses /dev/poll, triggering a NULL pointer dereference...
CVE-2002-2197
CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...
Poll It v2.0 cgi
'PollItSSIv2.0.cgi SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10459";...
phpPoll.txt
svadvisory6 -------------------------------------------------------------+ Title: PHP Injection in PHP Poll Creator | Software: PHP Poll Creator v 1.01 | Homepage: http://www.phppc.de +------------+ Finder: rash | 24.05.05 | -------------------------------------------------------------+ Descripti...
CVE-2005-2415
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 value parameter to the poll module or 2 pId parameter to the gallery module...
Hardened-PHP Project Security Advisory 2005-11.59
Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in Contrexx Release Date: 2005/07/21 Last Modified: 2005/07/18 Author: Christopher Kunz Application: Contrexx 1.0.5 Severity: Cross-Site Scripting, SQL injection and information disclosure, passwo...
PHP Injection in PHP Poll Creator
svadvisory6 -------------------------------------------------------------+ Title: PHP Injection in PHP Poll Creator | Software: PHP Poll Creator v 1.01 | Homepage: http://www.phppc.de +------------+ Finder: rash | 24.05.05 | -------------------------------------------------------------+ Descripti...
PHP Poll Creator 1.0.1 - 'Poll_Vote.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/13760/info PHP Poll Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer...
PHP Poll Creator 1.0.1 - Poll_Vote.php Remote File Inclusion
PHP Poll Creator 1.0.1 - PollVote.php Remote File Inclusion source: https://www.securityfocus.com/bid/13760/info PHP Poll Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...
CVE-2003-1179
Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PHP code via the includepath parameter in 1 booth.php, 2 png.php, 3 pollssi.php, or 4 popup.php, the 5 basepath parameter to common.inc.php...
CVE-2003-1178
CVE-2003-1178 affects Advanced Poll 2.0.2. It exposes a vulnerability in comments.php where the (1) id, (2) template_set, or (3) action parameter can cause evaluated PHP code to run, allowing remote code execution. Impact is consistent with arbitrary PHP execution (no authentication required as p...
CVE-2003-1180
CVE-2003-1180 describes a directory traversal vulnerability in Advanced Poll 2.0.2 . The issue allows remote attackers to read arbitrary files or inject arbitrary local PHP files by using “..” sequences in the parameters base_path or pollvars[lang] when accessing admin scripts (1) index.php, (2) ...