CVE-2010-1704

Multiple SQL injection vulnerabilities in 2daybiz Polls aka Advanced Poll Script allow remote attackers to execute arbitrary SQL commands via 1 the password field to login.php, 2 the login field aka email parameter to login.php, 3 the password field aka pass parameter to the default URI under...

CVE-2010-1704

CVE-2010-1704 corresponds to multiple SQL injection vulnerabilities in the 2daybiz Polls (aka Advanced Poll) Script. The affected component is the server-side login and admin interfaces of the script, where user-supplied input in specific fields can be manipulated to alter SQL commands. Specifica...