PT-2026-66750 · Phpjabbers · Phppollscript

Kamil Szczurowski + 1 · CVE-2026-46593 · Publicado 2026-07-31 · Atualizado 2026-07-31

NVD

CVSS v4.0

8.6

Alta

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-46593

Produtos afetados

Phppollscript

Referências · 3

• https://cert.pl/en/posts/2026/07/CVE-2025-67649 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-46593 · Nota de Segurança
• https://phpjabbers.com/php-poll-script · Nota