PT-2008-6634 · Pollpro · Pollpro

Alphanix · Published 2008-12-15 · Updated 2017-09-29 · CVE-2008-5573

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Poll Pro version 2.0

Description A SQL injection issue in the login feature allows remote attackers to execute arbitrary SQL commands via the username and password parameters.

Recommendations For Poll Pro version 2.0, consider disabling the login feature until a patch is available to prevent exploitation. Restrict access to the login module to minimize the risk of SQL injection attacks. Avoid using the username and password parameters in the affected login endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-5573

Affected Products

Pollpro

References · 7

• 🔥 https://exploit-db.com/exploits/7391 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5573 · Security Note
• http://secunia.com/advisories/33044 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47169 · Note
• http://osvdb.org/50576 · Note
• http://securityreason.com/securityalert/4741 · Note
• http://securityfocus.com/bid/32707 · Note