Nabopoll

nabopoll

Vendor: Nabocorp • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-1166 1Nabocorp 1Nabopoll Apr 23, 2026 Mar 2, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter.
CVE-2007-0873 1Nabocorp 1Nabopoll Apr 23, 2026 Feb 12, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a direct request for (1) config_edit.php, (2) template_edit.php, or (3) survey_edit.php in admin/.
CVE-2005-2157 1Nabocorp 1Nabopoll Apr 16, 2026 Jul 6, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote attackers to execute arbitrary PHP code via the path parameter.