Unscored CVE-2013-1400 EUVD-2013-1438GHSA-pw73-23m5-v8hv

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL c…

Published Feb 13, 2020 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or poll_id parameter in a viewPollResults or userlogs action.

References

57479 vdb-entry
81466 vdb-entry
20130121 Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin mailing-list