PatchTheCVEadvanced poll vulnerabilities and fixes
Recent CVEs affecting advanced poll, with upgrade or downgrade steps. 12 tracked.
Also searched as: advancedpoll.
advanced poll has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2010-05-20. Highest priority: CVE-2007-0845 (score 55/100).
- CVE-2010-2003 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in misc/get_admin.php in Advanced Poll 2.08 allows remote attackers t
- CVE-2007-0845 HIGH 7.5 DOWNGRADE admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and
- CVE-2006-2131 MEDIUM 5.0 DOWNGRADE include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to i
- CVE-2006-2130 MEDIUM 5.1 DOWNGRADE SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execut
- CVE-2006-1617 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arb
- CVE-2006-1616 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL c
- CVE-2005-3742 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attacke
- CVE-2003-1181 MEDIUM 5.0 DOWNGRADE Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, w
- CVE-2003-1180 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or in
- CVE-2003-1179 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute ar
- CVE-2003-1178 HIGH 7.5 DOWNGRADE Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitra
- CVE-2001-1423 HIGH 7.5 UPGRADE Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by sett
FAQ
How do I fix advanced poll vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is advanced poll being exploited right now?
None of the tracked advanced poll CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which advanced poll CVE should I patch first?
CVE-2007-0845 currently ranks highest (55/100): admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and .