2496 matches found
CVE-2006-2130
The CVE-2006-2130 entry concerns a SQL injection vulnerability in Advanced Poll 2.0.4, exploitable through the User-Agent HTTP header in include/class_poll.php. The connected documents confirm affected software and the root cause is improper handling of User-Agent data, enabling remote attackers ...
CVE-2006-2131
The CVE-2006-2131 entry concerns Advanced Poll 2.0.4, where include/class_poll.php uses the HTTP_X_FORWARDED_FOR header to identify the client IP. The root cause is relying on X-Forwarded-For for IP checks, which allows remote attackers to spoof the source IP and bypass voting restrictions. The a...
CVE-2006-2131
include/classpoll.php in Advanced Poll 2.0.4 uses the HTTPXFORWARDEDFOR X-Forwarded-For HTTP header to identify the IP address of a client, which makes it easier for remote attackers to spoof the source IP and bypass voting restrictions...
free-php.net Poll 1.0 admin login
google dork:"powered by free-php.net" poll last path add to /admin/ select poll and modify or addnew poll credits:tugr@...
CVE-2006-2130: Undefined Security Weakness
SQL injection vulnerability in include/classpoll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...
CVE-2006-2131: Undefined Security Weakness
include/classpoll.php in Advanced Poll 2.0.4 uses the HTTPXFORWARDEDFOR X-Forwarded-For HTTP header to identify the IP address of a client, which makes it easier for remote attackers to spoof the source IP and bypass voting restrictions...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to comments.php or 2 pollid parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616...
Sql injection
Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to comments.php or 2 pollid parameter to page.php...
CVE-2006-1616
Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to comments.php or 2 pollid parameter to page.php...
CVE-2006-1617
Multiple cross-site scripting XSS vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to comments.php or 2 pollid parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616...
CVE-2006-1617
CVE-2006-1617 relates to multiple XSS vulnerabilities in Advanced Poll 2.02. The affected components are comments.php (id parameter) and page.php (poll_id parameter), allowing remote attackers to inject arbitrary script/HTML. The description notes a possible relation to CVE-2006-1616 (SQL injecti...
CVE-2006-1617
Multiple cross-site scripting XSS vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to comments.php or 2 pollid parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616...
CVE-2006-1616
CVE-2006-1616 involves multiple SQL injection vulnerabilities in Advanced Poll 2.02. The affected component is the poll software’s pages where the (1) id parameter passed to comments.php and (2) poll_id parameter passed to page.php can be exploited to execute arbitrary SQL commands. The NVD entry...
CVE-2006-1616
Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to comments.php or 2 pollid parameter to page.php...
CVE-2006-1616: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to comments.php or 2 pollid parameter to page.php...
CVE-2006-1617: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to comments.php or 2 pollid parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616...
Sql injection
SQL injection vulnerability in index.php in Phpclanwebsite aka PCW 1.23.1 allows remote attackers to execute arbitrary SQL commands via the 1 par parameter in the post function on the forum page and possibly the 2 pollid parameter on the poll page. NOTE: the pollid vector can also allow resultant...
CVE-2006-0444
SQL injection vulnerability in index.php in Phpclanwebsite aka PCW 1.23.1 allows remote attackers to execute arbitrary SQL commands via the 1 par parameter in the post function on the forum page and possibly the 2 pollid parameter on the poll page. NOTE: the pollid vector can also allow resultant...
CVE-2006-0444
SQL injection vulnerability in index.php in Phpclanwebsite aka PCW 1.23.1 allows remote attackers to execute arbitrary SQL commands via the 1 par parameter in the post function on the forum page and possibly the 2 pollid parameter on the poll page. NOTE: the pollid vector can also allow resultant...