Sql injection

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to 1 results.php, 2 topolls.php, 3 pollit.php...

CVE-2006-1217

DSPoll 1.1 is affected by SQL injection via the pollid parameter in include/results.php, include/topolls.php, and include/pollit.php. The root cause is improper sanitization of pollid, allowing remote attackers to execute arbitrary SQL commands. According to eVuln documentation, a PoC/Exploit exi...