2 matches found
Sql injection
SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...
CVE-2018-5988
CVE-2018-5988 affects Flexible Poll 1.2. The vulnerability is a SQL Injection in the id parameter of mobile_preview.php and index.php, caused by unsafely handling user-supplied input. Impact per sources: remote attacker can inject SQL commands, with potential data exposure/integrity effects as de...