Lucene search
K

9 matches found

NVD
NVD
added 2022/03/22 6:15 p.m.11 views

CVE-2022-27228

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code...

10CVSS0.92388EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/03/22 5:27 p.m.13 views

CVE-2022-27228

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code...

9.9AI score0.92388EPSS
Exploits1References1
CVE
CVE
added 2022/03/22 5:27 p.m.554 views

CVE-2022-27228

CVE-2022-27228 affects Bitrix Site Manager’s built-in vote (Polls, Votes) module prior to version 21.0.100. A remote unauthenticated attacker can execute arbitrary code on affected systems due to the module’s vulnerability, with CVSS overall high impact (C/H/I/A all high) reported in multiple sou...

10CVSS9.6AI score0.92388EPSS
Exploits1References1Affected Software1
seebug.org
seebug.org
added 2015/10/09 12:0 a.m.25 views

PHPCMS v9.5.* vote模块 命令执行

No description provided by source...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/10/22 12:0 a.m.13 views

ShopBuilder 5.6.1 /module/vote/admin/vote.php SQL注入漏洞

No description provided by source...

7.1AI score
Exploits0
0day.today
0day.today
added 2010/02/21 12:0 a.m.30 views

Danneo CMS <= 0.5.2 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== Danneo CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r...

7.1AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2008/10/21 1:18 a.m.3 views

CVE-2008-4633

SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote."...

6CVSS6.4AI score0.00261EPSS
Exploits0References5
Cvelist
Cvelist
added 2008/10/21 12:0 a.m.13 views

CVE-2008-4633

SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote."...

7.9AI score0.00261EPSS
Exploits0References4
Drupal
Drupal
added 2008/10/15 12:0 a.m.13 views

SA-2008-064 - Node Vote - SQL injection vulnerability

The Node Vote module allows authorized users to vote on certain types of nodes. If the administrator has enabled the "Allow user to vote again" setting for the Node Vote module, malicious user can inject SQL when changing a previously cast vote. This is because Node Vote does not properly use the...

8.3AI score
Exploits0References6
Rows per page
Query Builder