Sql injection

2008-10-2914:22:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.7%

JSON

SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter.

CPENameOperatorVersion
aiocpeq1.4.000
aiocpeq1.4.001

CPE	Name	Operator	Version
	aiocp	eq	1.4.000
	aiocp	eq	1.4.001

References

secunia.com/advisories/32431

securityreason.com/securityalert/4518

www.exploit-db.com/exploits/6854