EUVD-2006-1221

Malware in sbrugna...

[eVuln] DSPoll Multiple SQL Injection Vulnerabilities

New eVuln Advisory: DSPoll Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/96/summary.html --------------------Summary---------------- eVuln ID: EV0096 CVE: CVE-2006-1217 Software: DSPoll Sowtware's Web Site: http://dsportal.uw.hu/ Versions: 1.1 Critical Level: Moderate Type: SQL...

Sql injection

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to 1 results.php, 2 topolls.php, 3 pollit.php...

CVE-2006-1217

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to 1 results.php, 2 topolls.php, 3 pollit.php...

CVE-2006-1217

DSPoll 1.1 is affected by SQL injection via the pollid parameter in include/results.php, include/topolls.php, and include/pollit.php. The root cause is improper sanitization of pollid, allowing remote attackers to execute arbitrary SQL commands. According to eVuln documentation, a PoC/Exploit exi...