ocPortal 9.0.16 Cross Site Scripting

Exploit Title: ocPortal 9.0.16 Multiply XSS Vulnerabilities Google Dork: "Copyright c ocPortal 2011 " Date: 26-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: http://ocportal.com/ Vendor contacted: 22-2-2015 Fix: http://ocportal.com/site/news/view/securityissues/xss-vulnerability-patch.htm...

WordPress Plugin Sodahead Polls Has Multiple Cross-Site Scripting Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Sodahead Polls plugin is a plugin for polls. WordPress plugin Sodahead Polls suffers from multiple cross-site scripting vulnerabilities...

CVE-2011-5304

Multiple cross-site scripting XSS vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via 1 the pollid parameter to customizer.php or 2 the customize parameter to poll.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via 1 the pollid parameter to customizer.php or 2 the customize parameter to poll.php...

CVE-2011-5304

The CVE-2011-5304 issue involves the WordPress Sodahead Polls plugin before version 2.0.4, where multiple XSS vulnerabilities allow remote injection via poll_id in customizer.php or via customize in poll.php. The root cause is input handling flaws leading to script/HTML injection; impact is typic...

CVE-2011-5304

Multiple cross-site scripting XSS vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via 1 the pollid parameter to customizer.php or 2 the customize parameter to poll.php...

WordPress Sodahead Polls Plugin <= 2.0.3 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

CP Polls < 1.0.1 - XSS

The Polls CP WordPress plugin was affected by a XSS security vulnerability...

Polldaddy Polls & Rating 2.0.23 - polldaddy-org.php polldaddy-ratings-title-filter Parameter Reflected XSS

The Crowdsignal Polls & Ratings WordPress plugin was affected by a polldaddy-org.php polldaddy-ratings-title-filter Parameter Reflected XSS security vulnerability...

UPM-POLLS 1.0.4 - BLIND SQL injection

The upm-polls WordPress plugin was affected by a BLIND SQL injection security vulnerability...

CVE-2014-4856

Cross-site scripting XSS vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a ratings shortcode and a unique ID. NOTE: some of these details are obtained from third party informati...

CVE-2014-4856

Polldaddy Polls & Ratings WordPress plugin vulnerability CVE-2014-4856 concerns an XSS flaw in versions prior to 2.0.25 triggered via the ratings shortcode and a unique_id parameter. The issue allows remote attackers to inject arbitrary script/HTML. Affected product: Polldaddy Polls & Ratings plu...

MyBB Multiple Cross-Site Scripting and SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13827/info MyBB is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to...

2daybiz Polls Script SQL Injection Vulnerability Exploit

No description provided by source...

ATutor 1.6.4 - Multiple Cross Site Scripting

No description provided by source. Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them Credit : ItSecTeam Remote : Yes Status : Bug mail : [email protected] Dork : ATutor 1.6.4 Special Tnx : am!rkh@n, Amin ShokohiPejvak, C0M0D0, 0xd41684c654, r3dmove And All It Security Team Members...

WordPress UPM Polls plugin <= 1.0.3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: UPM Polls = 1.0.3 SQL Injection Vulnerability Date: 2011-08-06 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.3.zip Version: 1.0.3 tested --- PoC --- !/bin/python...

PVote 1.0/1.5 Poll Content Manipulation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4540/info PVote is a web voting system written in PHP. It will run on most Unix and Linux variants as well as Microsoft Windows operating systems. It is possible for a remote attacker to add/delete web polls just by...

joomla component appointinator 1.0.1 - Multiple Vulnerabilities

No description provided by source. Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities Name Appointinator Vendor http://appointinator.chemeia.info Versions Affected 1.0.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmai...

Quick Polls Local File Inclusion and Deletion Vulnerabilities

No description provided by source. 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file...

Wordpress UPM-POLLS Plugin 1.0.4 - Blind SQL Injection

No description provided by source. Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress 3.2.1,Firefox 4, XAMPP Info:...