NuytsTech Security

CVE-2006-1217

by ·

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php.

Date published : 2006-03-13

http://www.securityfocus.com/bid/17103

http://www.securityfocus.com/archive/1/428663/100/0/threaded

Tags: