Nabocorp : Security Vulnerabilities, CVEs, CVSS score >= 1
SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter.
Max CVSS
7.5
EPSS Score
0.21%
Published
2007-03-02
Updated
2018-10-16
nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a direct request for (1) config_edit.php, (2) template_edit.php, or (3) survey_edit.php in admin/.
Max CVSS
7.5
EPSS Score
10.16%
Published
2007-02-12
Updated
2018-10-16
PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote attackers to execute arbitrary PHP code via the path parameter.
Max CVSS
5.0
EPSS Score
2.40%
Published
2005-07-06
Updated
2011-03-08
3 vulnerabilities found