Vulnerabilities

TI-2007-01133 CVE-2007-1166 · GHSA-x926-m33v-x54w

SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to…

LOW 35

SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01206 Published 2007-02-28 No fix listed CWE-89

TI-2007-00849 CVE-2007-0873 · GHSA-wqff-3wch-48w9

nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain…

MEDIUM 44

nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a direct request for (1) config_edit.php, (2) template_edit.php, or (3) survey_edit.php in admin/.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0804 Published 2007-02-12 No fix listed

TI-2005-02038 CVE-2005-2157 · GHSA-3wjh-xpx4-2h8c

PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote…

LOW 27

PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote attackers to execute arbitrary PHP code via the path parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02268 Published 2005-07-06 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to…

nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain…

PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote…