CVE-2010-4851

CVE-2010-4851 affects Eclime 1.1.2b. The OpenVAS/NVD entries document multiple SQL injection vulnerabilities in the web app, exploitable via (1) ref and (2) poll_id parameters to index.php and (3) country parameter to create_account.php. Attacks can lead to arbitrary SQL execution and exposure of...