CVE-2007-0798

Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...

CVE-2006-6577

SQL injection vulnerability in polls.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6343

SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

XSS in script Mobile

Discovered : SwEET-DeViL & HaCkEr sUn Product: http://www.ac4p.com tame : AL-garnei :::::::::::::::::::::::::::::::::::::::::: /1/ index.php http://www.site.com/path/index.php?Bloks=XSS http://www.site.com/path/index.php?Newnews=XSS http://www.site.com/path/index.php?lBlok=XSS...

MttKe-php.txt

TitLe : Xss in MttKe-php v2.6 eXpLoIt : http://target/path/components/polls?p=poll&topic=alert By : R0t-KeY --- s33 u ;...

fusionpolls.txt

Fusion Polls xtrphome Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/admin/index.php?xtrphome=Command-Shell /SpC-x...

Fusion Polls (xtrphome) Remote File Inclusion

Fusion Polls xtrphome Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/admin/index.php?xtrphome=Command-Shell /SpC-x...

Design/Logic Flaw

Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the 1 Weblink, 2 Polls, 3 Newsfeeds, 4 Weblinks, 5 Content, 6 Content Section, 7 Content Category, 8 Contact items, or 9 Contact Search, 10 Content...

CVE-2006-1048

Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the 1 Weblink, 2 Polls, 3 Newsfeeds, 4 Weblinks, 5 Content, 6 Content Section, 7 Content Category, 8 Contact items, or 9 Contact Search, 10 Content...

CVE-2006-1048: Undefined Security Weakness

Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the 1 Weblink, 2 Polls, 3 Newsfeeds, 4 Weblinks, 5 Content, 6 Content Section, 7 Content Category, 8 Contact items, or 9 Contact Search, 10 Content...

CVE-2005-4606: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in checkuser.asp in multiple Web Wiz products including 1 Site News 3.06 and earlier, 2 Journal 1.0 and earlier, 3 Polls 3.06 and earlier, and 4 and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter...

CVE-2005-3772

Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the 1 Itemid variable in the Polls modules and 2 multiple unspecified methods in the mosDBTable class...

CVE-2005-3772: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the 1 Itemid variable in the Polls modules and 2 multiple unspecified methods in the mosDBTable class...

CVE-2002-0588: Undefined Security Weakness

PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to 1 add.php or 2 del.php...

PVote 1.01.5 - Poll Content Manipulation

PVote 1.01.5 - Poll Content Manipulation source: https://www.securityfocus.com/bid/4540/info PVote is a web voting system written in PHP. It will run on most Unix and Linux variants as well as Microsoft Windows operating systems. It is possible for a remote attacker to add/delete web polls just b...

CGI-World Poll It 2.0 - Internal Variable Override

CGI-World Poll It 2.0 - Internal Variable Override source: https://www.securityfocus.com/bid/1431/info Poll It is a Perl CGI application used to create and maintain opinion polls on websites. The program relies on a number of internal variables. These variables can be overwritten by any remote us...