RSS   Vulnerabilities for 'Quick polls'   RSS

2011-03-09
 
CVE-2011-1099

CWE-22
 

 
Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the p parameter in a preview action to index.php, or (2) delete arbitrary files via a .. (dot dot) in the p parameter in a delete action to index.php.

 

 >>> Vendor: Focalmedia.net 2 Products
Sitenet bbs
Quick polls


Copyright 2024, cxsecurity.com

 

Back to Top