CVE-2007-0984

CVE-2007-0984 describes an SQL injection in PollMentor 2.0: the vulnerable point is the parameter id passed to pollmentorres.asp via admin_poll.asp , enabling remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack...