Liferay Portal 6.2.0 CE GA1 Multiple XSS

According to its self-reported version number, the version of Liferay Portal running on the remote host is 6.2.0. It is, therefore, potentially affected by the following cross-site scripting vulnerabilities : - Input passed from page titles is not sanitized before it is displayed in the Recycle...

CVE-2013-5640

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...

Sql injection

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...

CVE-2013-5640

Summary: CVE-2013-5640 (and related CVE-2013-7349) affect the Gnew 2013.1 application, with multiple SQL injection vectors. The vulnerabilities allow remote attackers to inject SQL via parameters in polls/vote.php (answer_id, question_id), comments/add.php (story_id) and comments/edit.php, or pos...

Wordpress wp-polls plugin Full Path Disclosure vulnerability‎

Exploit for php platform in category web applications Exploit: http://localhost/wp-content/plugins/wp-polls/polls-templates.php Demo http://www.catenaccio.nl/wp-content/plugins/wp-polls/polls-templates.php http://www.iaei.org/wp-content/plugins/wp-polls/polls-templates.php...

WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection

WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress...

WordPress UPM-POLLS 1.0.4 Blind SQL Injection

Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress 3.2.1,Firefox 4, XAMPP Info: Best Plugin to create Polls for yo...

WordPress UPM Polls Plugin 1.0.4 - Blind SQL Injection

UPM Polls plugin is prone to an SQL injection. This vulnerability allows an attacker or any user who can view poll results to use blind SQL injection to extract database data and compromise the whole server. Solution Update the plugin...

Wordpress plugin 1.0.4 UPM-POLLS blind SQL Injection

Exploit for php platform in category web applications Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress...

CVE-2010-5004

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2010-5004

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2010-5004

CVE-2010-5004 describes a SQL injection in searchvote.php of the 2daybiz Polls (Advanced Poll) Script, exploitable via the category parameter. Public sources (NVD/Red Hat PR/PRION/CVE lists) confirm the vulnerability and a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authent...

CVE-2010-5004

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

WordPress UPM Polls Plugin 'qid' Parameter SQL Injection Vulnerability

WordPress UPM Polls Plugin is prone to an SQL injection vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Plugin UPM Polls 1.0.3 - SQL Injection

WordPress Plugin UPM Polls 1.0.3 - SQL Injection Exploit Title: UPM Polls getrow"SELECT FROM ".$wpdb-prefix."pppmpolls WHERE id = $QID", ARRAYA;...

WordPress UPM Polls plugin <= 1.0.3 - SQL Injection

This WordPress UPM Polls plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

UPM Polls <= 1.0.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: UPM Polls getrow"SELECT FROM ".$wpdb-prefix."pppmpolls WHERE id = $QID", ARRAYA; 0day.today 2018-04-09...

UPM Polls 1.0.3 SQL Injection

Exploit Title: UPM Polls getrow"SELECT FROM ".$wpdb-prefix."pppmpolls WHERE id = $QID", ARRAYA;...

WordPress Plugin UPM Polls 1.0.3 - SQL Injection

Exploit Title: UPM Polls getrow"SELECT FROM ".$wpdb-prefix."pppmpolls WHERE id = $QID", ARRAYA;...

WordPress Plugin Sodahead Polls 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Sodahead Polls 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46902/info Sodahead Polls is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage...