Ajsquare

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Ajsquare records in CISA KEV

No Ajsquare vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aj Article 3 records LOW Free Polling Script 3 records LOW Zeuscart 3 records LOW Aj Auction Pro-oopd 2 records LOW Aj Hyip 2 records LOW Aj Classifieds 1 record LOW Aj Matrix Dna 1 record LOW Aj Shopping Cart 1 record LOW

Records

3 records in Free Polling Script · all components

TI-2008-06732 CVE-2008-7044 · GHSA-8v6p-ch4r-486h

SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script…

LOW 35

SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to execute arbitrary SQL commands via the ques parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-08-24 No fix listed CWE-89

TI-2008-06734 CVE-2008-7046 · GHSA-fj83-j657-qpv5

AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication…

LOW 33

AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02163 Published 2009-08-24 No fix listed CWE-287

TI-2008-06733 CVE-2008-7045 · GHSA-768v-3pj5-xwfp

AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass…

LOW 33

AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02602 Published 2009-08-24 No fix listed CWE-287

Open these records in search →

Critical	0
High	9
Medium	7
Low	0
No CVSS	0