Vulnerabilities > X Scripts > X Poll

DATE CVE VULNERABILITY TITLE RISK
2006-08-01 CVE-2006-3960 SQL Injection vulnerability in X-Scripts X-Poll 2.30
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter.
network
low complexity
x-scripts CWE-89
7.5
2006-05-10 CVE-2006-2281 Code Injection vulnerability in X-Scripts X-Poll 2.30
X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, then access it.
network
low complexity
x-scripts CWE-94
7.5