41 matches found
EUVD-2009-4646
Malware in sbrugna...
EUVD-2008-0575
Malware in sbrugna...
EUVD-2008-7050
Malware in sbrugna...
EUVD-2025-28726
Malicious code in bioql PyPI...
CVE-2025-6352
CVE-2025-6352 affects code-projects Automated Voting System 1.0, Backend vote.php. The vulnerability involves an unknown function in /vote.php enabling direct request manipulation that can be triggered remotely, with exploitation disclosed publicly. Multiple connected sources corroborate a remote...
CVE-2025-6352 code-projects Automated Voting System Backend vote.php direct request
A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-6352 code-projects Automated Voting System Backend vote.php direct request
A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been...
PT-2025-26443 · Unknown · Automated Voting System
Name of the Vulnerable Software and Affected Versions: code-projects Automated Voting System version 1.0 Description: A problematic vulnerability has been found in the Automated Voting System. It affects an unknown function of the file /vote.php in the Backend component. The manipulation leads to...
qibocms v7 /vote.php SQL注入漏洞
No description provided by source...
Finalist - vote.php id Parameter SQL Injection
The finalist WordPress plugin was affected by a vote.php id Parameter SQL Injection security vulnerability...
Sql injection
Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...
CVE-2013-5640
Summary: CVE-2013-5640 (and related CVE-2013-7349) affect the Gnew 2013.1 application, with multiple SQL injection vectors. The vulnerabilities allow remote attackers to inject SQL via parameters in polls/vote.php (answer_id, question_id), comments/add.php (story_id) and comments/edit.php, or pos...
CVE-2013-5640: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...
CVE-2013-7219
CVE-2013-7219 affects the Joomla! Sexy Polling extension (com_sexypolling) by 2GLux. The vulnerability is an SQL injection in vote.php caused by insufficient validation of the POST parameter answer_id[]. This allows remote attackers to execute arbitrary SQL commands against the application's data...
CVE-2013-7219: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in vote.php in the 2Glux Sexy Polling comsexypolling component before 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the answerid parameter...
cmstop /apps/vote/controller/vote.php SQL注入漏洞
No description provided by source...
EASETHINK 1.4 /vote.php SQL注入漏洞
易想团购是国内一款流行的团购管理系统软件，其v1.4版本/vote.php文件代码第33行，遍历$REQUEST'name'数组，将数组键赋值给$voteaskid变量，代码第40行，将$voteaskid变量拼接SQL语句，并带入数据库查询，这个过程中并未将$voteaskid变量过滤，导致SQL注入漏洞产生。 EASETHINK 1.4...
Easy to want to buy the system to the latest version through the kill vulnerability-vulnerability warning-the black bar safety net
Vulnerability in the vote. php file In require './ system/common.php'; require './ app/Lib/appinit.php'; require './ app/Lib/message.php'; require './ app/Lib/side.php'; if$REQUEST'act'=='dovote' $ok = false; foreach$REQUEST'name' as $voteaskid=$names //if in command-line mode operation, will not...
PHP168 V6.02 vote.php 跨站漏洞
No description provided by source...
Social Share 2010-06-05 HTTP Response Splitting
www.eVuln.com advisory: HTTP Response Splitting in Social Share Summary: http://evuln.com/vulns/168/summary.html Details: http://evuln.com/vulns/168/description.html -----------Summary----------- eVuln ID: EV0168 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: low Type: HTT...