3 matches found
CVE-2008-7044
A CVE for AJ Square Free Polling Script (AJPoll) Database exposes a SQL injection in admin/include/newpoll.php via the ques parameter. This allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability. No remediation details are provided in the...
CVE-2008-7046
The CVE-2008-7046 entry concerns AJ Square Free Polling Script (AJPoll). The vulnerability allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a vector distinct from CVE-2008-7045. The description indicates an authentication byp...
CVE-2008-7045
AJ Square Free Polling Script (AJPoll) Database version is affected by CVE-2008-7045, which allows remote attackers to bypass authentication and reset poll votes by issuing a direct request to admin/resetvote.php. This is the concrete vulnerability described in the CVE entry; no remediation or af...