Unscored CVE-2006-1217 EUVD-2006-1221GHSA-q2cr-q3g4-67c9

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results…

Published Mar 14, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php.

References

23881 vdb-entry
19209 third-party-advisory
1015758 vdb-entry
23879 vdb-entry
17103 vdb-entry
23880 vdb-entry
dspoll-pollid-sql-injection(25192) vdb-entry
620 third-party-advisory
20060324 [eVuln] DSPoll Multiple SQL Injection Vulnerabilities mailing-list
622 third-party-advisory
ADV-2006-0932 vdb-entry
http://evuln.com/vulns/96/summary.html