Lucene search
+L
AjsquareFree Polling Script

3 matches found

CVE
CVE
added 2009/08/24 10:0 a.m.60 views

CVE-2008-7044

A CVE for AJ Square Free Polling Script (AJPoll) Database exposes a SQL injection in admin/include/newpoll.php via the ques parameter. This allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability. No remediation details are provided in the...

7.5CVSS8.7AI score0.00999EPSS
SaveWeb
CVE
CVE
added 2009/08/24 10:0 a.m.58 views

CVE-2008-7046

The CVE-2008-7046 entry concerns AJ Square Free Polling Script (AJPoll). The vulnerability allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a vector distinct from CVE-2008-7045. The description indicates an authentication byp...

6.4CVSS6.8AI score0.02163EPSS
Save
CVE
CVE
added 2009/08/24 10:0 a.m.51 views

CVE-2008-7045

AJ Square Free Polling Script (AJPoll) Database version is affected by CVE-2008-7045, which allows remote attackers to bypass authentication and reset poll votes by issuing a direct request to admin/resetvote.php. This is the concrete vulnerability described in the CVE entry; no remediation or af...

6.4CVSS7.1AI score0.02602EPSS
Save