İçeriğe atla
Noroxi

advanced poll kayıtları

advanced poll üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

      Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

      CWE

      Saldırı profili

      Tüm kayıtlar

      11 kayıt
      • CVE-2007-0845
        32İzleyin

        admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges

        YüksekCVSS 7,5Kavram kanıtıEPSS %6

        advanced poll · advanced poll8 Şub 2007

      • CVE-2003-1179
        31İzleyin

        Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PHP code via the inclu

        YüksekCVSS 7,5Kavram kanıtıEPSS %4

        advanced poll · advanced poll31 Ara 2003

      • CVE-2003-1178
        31İzleyin

        Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP code via the (1) id, (2

        YüksekCVSS 7,5İstismar yokEPSS %2

        advanced poll · advanced poll31 Ara 2003

      • CVE-2001-1423
        31İzleyin

        Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter.

        YüksekCVSS 7,5İstismar yokEPSS %1

        advanced poll · advanced poll10 Eki 2001

      • CVE-2003-1180
        31İzleyin

        Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbitrary local PHP files

        YüksekCVSS 7,5İstismar yokEPSS %1

        advanced poll · advanced poll31 Ara 2003

      • CVE-2006-1616
        30İzleyin

        Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id paramet

        YüksekCVSS 7,5İstismar yokEPSS %1

        advanced poll · advanced poll5 Nis 2006

      • CVE-2003-1181
        22İzleyin

        Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() fun

        OrtaCVSS 5,0Kavram kanıtıEPSS %7

        advanced poll · advanced poll25 Eki 2003

      • CVE-2006-2131
        20İzleyin

        include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify the IP address of a cl

        OrtaCVSS 5,0İstismar yokEPSS %1

        advanced poll · advanced poll1 May 2006

      • CVE-2006-2130
        20İzleyin

        SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via t

        OrtaCVSS 5,1İstismar yokEPSS %1

        advanced poll · advanced poll1 May 2006

      • CVE-2005-3742
        18İzleyin

        Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web scr

        OrtaCVSS 4,3Kavram kanıtıEPSS %1

        advanced poll · advanced poll22 Kas 2005

      • CVE-2006-1617
        17İzleyin

        Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via

        OrtaCVSS 4,3İstismar yokEPSS %0

        advanced poll · advanced poll5 Nis 2006