Vulnerabilities

TI-2008-06734 CVE-2008-7046 · GHSA-fj83-j657-qpv5

AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication…

LOW 33

AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02163 Published 2009-08-24 No fix listed CWE-287

TI-2008-06733 CVE-2008-7045 · GHSA-768v-3pj5-xwfp

AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass…

LOW 33

AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02602 Published 2009-08-24 No fix listed CWE-287

TI-2008-06732 CVE-2008-7044 · GHSA-8v6p-ch4r-486h

SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script…

LOW 35

SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to execute arbitrary SQL commands via the ques parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-08-24 No fix listed CWE-89

Vulnerabilities

Filters

AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication…

AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass…

SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script…