32 matches found
LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability
No description provided by source. Title : LDU = 8.x polls.php Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : Powered by LDU SQL------------------------------------------------------ http://target/path/polls.php?id= Example: //...
MyBulletinBoard RC4 polls.php polloptions Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
ac4p Mobile polls.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execu...
CVE-2009-2141
Multiple cross-site scripting XSS vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web script or HTML via 1 the returnto parameter to makepoll.php, 2 the returnto parameter in a delete action to polls.php, or the 3 Info or 4 Avatar field to my.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web script or HTML via 1 the returnto parameter to makepoll.php, 2 the returnto parameter in a delete action to polls.php, or the 3 Info or 4 Avatar field to my.php...
CVE-2009-2141
Multiple cross-site scripting XSS vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web script or HTML via 1 the returnto parameter to makepoll.php, 2 the returnto parameter in a delete action to polls.php, or the 3 Info or 4 Avatar field to my.php...
CVE-2009-2141: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web script or HTML via 1 the returnto parameter to makepoll.php, 2 the returnto parameter in a delete action to polls.php, or the 3 Info or 4 Avatar field to my.php...
CVE-2006-6577: Undefined Security Weakness
SQL injection vulnerability in polls.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6389
CVE-2006-6389 and related CVEs describe multiple cross-site scripting (XSS) vulnerabilities in the ac4p Mobile application. The flaws enable remote attackers to inject arbitrary web script or HTML by submitting crafted input to specific parameters: (1) Taaa to up.php and (2) pollhtml and (3) Blok...
CVE-2006-6389: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via the 1 Taaa parameter to a up.php, or the 2 pollhtml and 3 Bloks parameters to b polls.php, different vectors than CVE-2006-5770...
CVE-2006-6343
CVE-2006-6343 concerns a SQL injection in the polls.php id parameter of Land Down Under / Seditio (Neocrome Seditio) 1.10 and earlier. The Nessus NASL details show the remote input to polls.php is not sanitized before use in a database query when magic_quotes_gpc is disabled, enabling an unauthen...
CVE-2006-6343: Undefined Security Weakness
SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
ac4p.txt
Discovered : SwEET-DeViL Product: http://www.ac4p.com tame : AL-garnei Saudi Arabia // Vulnerabilities there again this link http://www.securityfocus.com/archive/1/450496/30/0/threaded // \1\ in up.php http://site.com/path/up.php?Taaa=XSS \2\ in polls.php http://site.com/path/polls.php?pollhtml=x...
Seditio/Land Down Under Polls.PHP SQL注入漏洞
Seditio/Land Down Under是一款基于php的WEB应用程序。 Seditio/Land Down Under不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'Polls.PHP'脚本对用户提交的'id'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过web root路径限制，以web权限查看系统文件内容。 Neocrome Seditio 1.10 Neocrome Land Down Under 8.0 目前没有解决方案提供： http://www.neocrome.net/...
LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability
No description provided by source. Title : LDU = 8.x polls.php Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : "Powered by LDU" SQL------------------------------------------------------ http://target/path/polls.php?id= Example: //...
LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability
Title : LDU = 8.x polls.php Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : "Powered by LDU" SQL------------------------------------------------------ http://target/path/polls.php?id= Example: //...
LDU 8.x - polls.php SQL Injection
LDU 8.x - polls.php SQL Injection Title : LDU = 8.x polls.php Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : "Powered by LDU" SQL------------------------------------------------------ http://target/path/polls.php?id= Example: //...
LDU 8.x - 'polls.php' SQL Injection
Title : LDU = 8.x polls.php Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : "Powered by LDU" SQL------------------------------------------------------ http://target/path/polls.php?id= Example: //...
LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= LDU = 8.x polls.php Remote SQL Injection Vulnerability ========================================================= Title : LDU = 8.x polls.php Remote SQL Injection Vulnerability Autho...
CVE-2006-5770
Multiple cross-site scripting XSS vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via 1 Bloks, 2 Newnews, 3 lBlok, and 4 foooot parameter in a index.php; Newnews, 5 newmsgs, and Bloks parameter in b MobileNews.php; Newnews parameter in c polls.php; 6...