Vulnerabilities

TI-2009-04502 CVE-2009-4746 · GHSA-2g6v-2xh6-p5mw

Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script or HTML via the recordsPerPage parameter in a poll_default login action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01204 Published 2010-03-26 No fix listed CWE-79

TI-2009-04501 CVE-2009-4745 · GHSA-qhx7-j395-3hwr

Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow…

LOW 35

Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) sortField, (2) sortDesc, or (3) pageNumber parameter in a login action…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.009 Published 2010-03-26 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows…

Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow…