EUVD-2017-11174

Malware in sbrugna...

CVE-2017-20179

A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tourcontroller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able t...

CVE-2017-20179

A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tourcontroller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able t...

CVE-2017-20179

A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tourcontroller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able t...

Design/Logic Flaw

A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tourcontroller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able t...

CVE-2017-20179

CVE-2017-20179 affects InSTEDD Pollit 2.3.1, specifically the TourController in app/controllers/tour_controller.rb. The issue is described as a critical vulnerability with remote attack potential and an unknown weakness resulting from manipulation. A fix exists in Pollit 2.3.2, with the patch ide...

CVE-2017-20179 InSTEDD Pollit tour_controller.rb TourController Privilege Escalation

A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tourcontroller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able t...

CVE-2017-20179 InSTEDD Pollit tour_controller.rb TourController Privilege Escalation

A vulnerability was found in InSTEDD Pollit 2.3.1. It has been rated as critical. This issue affects the function TourController of the file app/controllers/tourcontroller.rb. The manipulation leads to an unknown weakness. The attack may be initiated remotely. Upgrading to version 2.3.2 is able t...

PT-2023-10630 · Instedd · Instedd Pollit

Name of the Vulnerable Software and Affected Versions: InSTEDD Pollit version 2.3.1 Description: A critical issue affects the TourController function of the file app/controllers/tour controller.rb. The manipulation leads to an unknown weakness, and the attack may be initiated remotely. Upgrading ...

InSTEDD Pollit 安全漏洞

Pollit is an open source application from InSTEDD. Helps you utilize the convenience of SMS to poll your audience at your convenience. InSTEDD Pollit version 2.3.1 has a security vulnerability that stems from a problem with the function TourController in the file app/controllers/tourcontroller.rb...

Дырка в CGI PollIt

Классическое сочетание дырок - обратный путь в директориях, "ядовитый 0" и др. приводят в к возможности доступа к любому файлу: /cgi-bin/pollit/PollItSSIv2.0.cgi?datadir=/etc/passwd00...

Дырка в Pollit CGI

Используя "ядовитый NUll" можно получить любой файл с сервера:http://www.targethost.com/pollit/PollItv2.0.cgi?datadir=etcpasswd00...

Pollit CGI-script opens doors!

Description: Bug in PollItSSIv2.0.cgi reveals info. Compromise: Accessing files that arn't in the web-dir. Vulnerable Systems: Pollit v2.0 only tested version. Details: When you run the Pollit CGI script ALL your world readable files could be accessed by any web user, for example your /etc/passwd...