CVE-2005-4640

SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 pollid or 2 previouspoll parameters...

CVE-2005-4640

The CVE-2005-4640 entry describes a SQL injection vulnerability in index.php of class-1 Poll Software 0.4 and earlier. The underlying issue is that input parameters (pollid and previouspoll) can be crafted to alter SQL commands executed by the application. This enables remote attackers to potenti...

class-1 Poll Software Multiple SQL Injection Vulnerabilities.

class-1 Poll Software Multiple SQL Injection Vulnerabilities. Author: r0t hackers.by.lv Date: 17 nov. 2005 Software:class-1 Poll Software v 0.4 Vendor:http://www.class1web.co.uk/ affected: v 0.4 and prior Description: Input passed to the "pollid" and "previouspoll" parameter in "index.php" isn't...