Sql injection

SQL injection vulnerability in adminpoll.asp in PollMentor 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to pollmentorres.asp...

CVE-2007-0984

CVE-2007-0984 describes an SQL injection in PollMentor 2.0: the vulnerable point is the parameter id passed to pollmentorres.asp via admin_poll.asp , enabling remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack...

CVE-2007-0984: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in adminpoll.asp in PollMentor 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to pollmentorres.asp...