2DayBiz ybiz Polls Script - SQL Injection

2DayBiz ybiz Polls Script - SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/pollsscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...

CVE-2010-1704

Multiple SQL injection vulnerabilities in 2daybiz Polls aka Advanced Poll Script allow remote attackers to execute arbitrary SQL commands via 1 the password field to login.php, 2 the login field aka email parameter to login.php, 3 the password field aka pass parameter to the default URI under...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in indexsearch.php in 2daybiz Polls aka Advanced Poll Script allow remote attackers to inject arbitrary web script or HTML via the 1 category parameter or 2 search field...

Sql injection

Multiple SQL injection vulnerabilities in 2daybiz Polls aka Advanced Poll Script allow remote attackers to execute arbitrary SQL commands via 1 the password field to login.php, 2 the login field aka email parameter to login.php, 3 the password field aka pass parameter to the default URI under...

CVE-2010-1703

The CVE-2010-1703 entry describes multiple cross-site scripting (XSS) vulnerabilities in the 2daybiz Polls (aka Advanced Poll) Script, targeting index_search.php via the (1) category parameter and (2) the search field. These flaws allow remote attackers to inject arbitrary web script or HTML. Aff...

CVE-2010-1704

CVE-2010-1704 corresponds to multiple SQL injection vulnerabilities in the 2daybiz Polls (aka Advanced Poll) Script. The affected component is the server-side login and admin interfaces of the script, where user-supplied input in specific fields can be manipulated to alter SQL commands. Specifica...

Directory traversal

Directory traversal vulnerability in the Community Polls comcommunitypolls component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1081

Directory traversal vulnerability in the Community Polls comcommunitypolls component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1081

Directory traversal vulnerability in the Community Polls comcommunitypolls component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1081

CVE-2010-1081 describes a Local File Inclusion in Joomla! component com_communitypolls (version 1.5.2 and possibly earlier). The root cause is a directory traversal flaw: an attacker can supply a ".." in the controller parameter to index.php to read arbitrary files. The connected document confirm...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the 1 Question and 2 Choice fields in tools/polls/add.php, the 3 Type and 4 Title fields in tools/groups/createmanual.php, and...

Joomla Component com_communitypolls LFI Vulnerability

No description provided by source. !===========================================================================! Joomla Component comcommunitypolls LFI Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 16 February, 2010...

Joomla Component com_communitypolls LFI Vulnerability

Exploit for unknown platform in category web applications ===================================================== Joomla Component comcommunitypolls LFI Vulnerability ===================================================== !===========================================================================!...

Joomla Community Polls Local File Inclusion

!===========================================================================! Joomla Component comcommunitypolls LFI Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 16 February, 2010...

Link Up Gold - Cross-Site Request Forgery (Add Admin)

Link Up Gold - Cross-Site Request Forgery Add Admin /\ == \ /\ \ /\ \ \ \ input type="hi...

WordPress WP-Polls 2.x Incorrect Flood Filter

Exploit for unknown platform in category web applications ============================================= WordPress WP-Polls 2.x Incorrect Flood Filter ============================================= Exploit Title: WP-Polls 2.x Incorrect Flood Filter Date: 30/11/2009 Software Link:...

WordPress Plugin WP-Polls 2.x - Incorrect Flood Filter

Exploit Title: WP-Polls 2.x Incorrect Flood Filter Date: 30/11/2009 Author: Jbyte jbyte-security.blogspot.com Software Link: http://lesterchan.net/wordpress/readme/wp-polls.html Version: 2.x Tested on: Windows 7/windows xp/ ubuntu 9.04/ ubuntu 9.10 Code :...

WordPress Plugin WP-Polls 2.x - Incorrect Flood Filter

WordPress Plugin WP-Polls 2.x - Incorrect Flood Filter Exploit Title: WP-Polls 2.x Incorrect Flood Filter Date: 30/11/2009 Author: Jbyte jbyte-security.blogspot.com Software Link: http://lesterchan.net/wordpress/readme/wp-polls.html Version: 2.x Tested on: Windows 7/windows xp/ ubuntu 9.04/ ubunt...

CVE-2008-7046

The CVE-2008-7046 entry concerns AJ Square Free Polling Script (AJPoll). The vulnerability allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a vector distinct from CVE-2008-7045. The description indicates an authentication byp...

CVE-2009-2618

CVE-2009-2618 is an SQL injection vulnerability in the MDPro Surveys Module (MDPro) 1.083.x. The issue allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php. OpenVAS entries corroborate MDPro SQLi vulnerability in this module and pro...