Advanced Poll

11 CVEs across 1 Advanced Poll products. Browse Advanced Poll vulnerabilities, severities, and proof-of-concept exploits.

Advanced Poll products with known CVEs

ProductCVEs
Advanced Poll11
Advanced Poll CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-08452007-02-08admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a vali…
CVE-2006-21312006-05-01include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify the IP address of a client, which makes i…
CVE-2006-21302006-05-01SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP…
CVE-2006-16172006-04-05Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the (1) id paramete…
CVE-2006-16162006-04-05Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to comments.php…
CVE-2005-37422005-11-22Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2003-11802003-12-31Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbitrary local PHP files via .. sequences i…
CVE-2003-11792003-12-31Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PHP code via the include_path parameter i…
CVE-2003-11782003-12-31Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP code via the (1) id, (2) template_set, or…
CVE-2003-11812003-10-25Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function.
CVE-2001-14232001-10-10Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter.