PT-2008-6634 · Pollpro · Pollpro

Alphanix · Publicado 2008-12-15 · Atualizado 2017-09-29 · CVE-2008-5573

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Poll Pro version 2.0

Description A SQL injection issue in the login feature allows remote attackers to execute arbitrary SQL commands via the username and password parameters.

Recommendations For Poll Pro version 2.0, consider disabling the login feature until a patch is available to prevent exploitation. Restrict access to the login module to minimize the risk of SQL injection attacks. Avoid using the username and password parameters in the affected login endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-5573

Produtos afetados

Pollpro

Referências · 7

• 🔥 https://exploit-db.com/exploits/7391 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47169 · Nota
• http://osvdb.org/50576 · Nota
• http://securityreason.com/securityalert/4741 · Nota
• http://securityfocus.com/bid/32707 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5573 · Nota de Segurança
• http://secunia.com/advisories/33044 · Aviso do Fabricante