CVE-2008-6625

The CVE describes an SQL injection vulnerability in getin.php of WEBBDOMAIN Polls (Poll) 1.0 and 1.01, exploitable via the username parameter. The underlying issue is unsanitized user input allowing arbitrary SQL commands to be executed by remote attackers. Affected software is WEBBDOMAIN Polls, ...

CVE-2008-6625: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in getin.php in WEBBDOMAIN Polls aka Poll 1.0 and 1.01 allows remote attackers to execute arbitrary SQL commands via the username parameter...

WEBBDOMAIN Polls 1.01 (SQL Injection) Auth Bypass Vulnerability

No description provided by source. / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // EgY Coders Vulnerability Research TM Discovered by : Hakxer Type Gap : WEBBDOMAIN Poll Auth Bypass...

WEBBDOMAIN Polls 1.01 - Authentication Bypass

WEBBDOMAIN Polls 1.01 - Authentication Bypass / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // EgY Coders Vulnerability Research TM Discovered by : Hakxer Type Gap : WEBBDOMAIN Poll...

WEBBDOMAIN Polls 1.01 - Authentication Bypass

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // EgY Coders Vulnerability Research TM Discovered by : Hakxer Type Gap : WEBBDOMAIN Poll Auth Bypass Script...

WEBBDOMAIN Polls 1.01 (SQL Injection) Auth Bypass Vulnerability

Exploit for unknown platform in category web applications =============================================================== WEBBDOMAIN Polls 1.01 SQL Injection Auth Bypass Vulnerability =============================================================== Discovered by : Hakxer Type Gap : WEBBDOMAIN Poll...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== MegaBBS Forum 2.2 SQL/XSS Multiple Remote Vulnerabilities =========================================================== AmnPardaz Security Research Team Title: MegaBBS Forum Multipl...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Descriptio...

Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting

www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Description: A complete, fully featured ASP...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administration of 1 polls, 2 profiles, 3 IP bans, and 4 forums in a web-app.org WebAPP 0.8 through 0.9.9.6; and b web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators...

CVE-2007-3416

Multiple cross-site request forgery CSRF vulnerabilities in the administration of 1 polls, 2 profiles, 3 IP bans, and 4 forums in a web-app.org WebAPP 0.8 through 0.9.9.6; and b web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators...

CVE-2007-3416

Multiple cross-site request forgery CSRF vulnerabilities in the administration of 1 polls, 2 profiles, 3 IP bans, and 4 forums in a web-app.org WebAPP 0.8 through 0.9.9.6; and b web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators...

phpreactor <===1.2.7 remote file include

phpreactor ===1.2.7 remote file include url:http://sourceforge.net/projects/phpreactor/ author:titanichacker egy-virus contact: hack-teach.com & mohandko.com & tryag.com bug in : /inc/view.inc.php & inc/users.inc.php & inc/updatecms.inc.php & inc/polls.inc.php...

action-rfi.txt

-------------------------------------------------- ActionPoll Script actionpoll.php Remote File Include -------------------------------------------------- Author : SekoMirza Date Found : April 14 2007 Location : French // ... Critical Lvl : critical Impact : System access Where : From Remote...

CVE-2007-0924

Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request to phpPollAdmin.php3. NOTE: this issue might subsume CVE-2006-3764...

CVE-2006-7003

PHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote attackers to execute arbitrary PHP code via a URL in the xtrphome parameter...

CVE-2006-7003

PHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote attackers to execute arbitrary PHP code via a URL in the xtrphome parameter...

CVE-2006-7003

The CVE-2006-7003 entry describes a PHP remote file inclusion in Fusion Polls: admin/index.php can include a file from a URL using the xtrphome parameter, allowing remote code execution. Affected: Fusion Polls (specific versions/components not stated). Root cause: unsafely including a user-contro...

CVE-2006-7003: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote attackers to execute arbitrary PHP code via a URL in the xtrphome parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...