2496 matches found
PHP Poll Creator 1.04 (poll_vote.php)File Include
PHP Poll Creator 1.04 pollvote.phpFile Include Source Code: http://www.phppc.de/download/phppc104.zip Vulnerable Code: include $relativerpfad . "layouttop.inc.php"; include $relativerpfad . "polltitelkat.inc.php"; Exploit : http://www.vicTim.com/PhpPC/pollvote.php?relativerpfad=sh3ll.txt? Discove...
advancedpoll202.txt
+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...
Advanced Poll v2.02 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...
[SA21997] Amazing Little Poll "lp_settings.inc" Password Disclosure
TITLE: Amazing Little Poll "lpsettings.inc" Password Disclosure SECUNIA ADVISORY ID: SA21997 VERIFY ADVISORY: http://secunia.com/advisories/21997/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Amazing Little Poll 1.x...
CVE-2006-4652
1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...
CVE-2006-4653: Undefined Security Weakness
1 Amazing Little Poll and 2 Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lpsettings file lpsettings.inc or lpsettings.php...
CVE-2006-4652
CVE-2006-4652 affects the applications Amazing Little Poll and Amazing Little Picture Poll, which ship with a default password of dsapoll. This allows remote attackers to create a new poll by submitting default credentials through lp_admin.php. The known entry provides a basic description and CVS...
CVE-2006-4652
1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...
CVE-2006-4652: Undefined Security Weakness
1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...
CVE-2006-4653
The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...
The Amazing Little Poll Admin Pwd
SOFTWARE ========= The Amazing Little Poll DESCRIPTION ============ google dork = "The Amazing Little Poll" and go to admin page /lpadmin.php default password dsapoll input to login admin or add to last path /lpsettings.inc and take administrator passwd $pwd="dsapoll"; ; create a new pol...
CVE-2006-4468
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the 1 mosMail, 2 JosIsValidEmail, and 3 josSpoofValue functions; 4 the lack of inclusion of globals.php in...
CVE-2006-4468
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the 1 mosMail, 2 JosIsValidEmail, and 3 josSpoofValue functions; 4 the lack of inclusion of globals.php in...
CVE-2006-4468: Improper Input Validation
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the 1 mosMail, 2 JosIsValidEmail, and 3 josSpoofValue functions; 4 the lack of inclusion of globals.php in...
[KAPDA::#55] - Joomla poll component vulnerability
KAPDA New advisory Vendor: http://www.joomla.org Vulnerable: 1.0.10 prior versions also maybe Affected Bug: user session validation weakness Exploitation: Remote with browser Poc: available Description: -------------------- From vendora€™s website. Joomla! is an award-winning Content Management...
Joomla! Component Poll 1.0.10 - Arbitrary Add Votes
Joomla! Component Poll 1.0.10 - Arbitrary Add Votes Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir hostname ex: www.sitename.com span class="Stil...
Joomla <=1.0.10 (poll component) Arbitrary Add Votes Exploit
No description provided by source. ?php Joomla poll component add unlimited votes Computer Security Researchers Institute works regardless of php.ini settings by trueend5 http://www.KAPDA.ir errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 2; obimplicitflush 1; echo...
Joomla <=1.0.10 (poll component) Arbitrary Add Votes Exploit
Exploit for unknown platform in category web applications ============================================================ Joomla Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir form name="form1"...
Joomla! Component Poll 1.0.10 - Arbitrary Add Votes
Joomla poll component arbitrary add votes Joomla poll component arbitrary add votes by trueend5 Computer Security Researchers Institute KAPDA.ir hostname ex: www.sitename.com path ex: /joomla...
xpoll110.txt
Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...