PT-2026-66750 · Phpjabbers · Phppollscript

Kamil Szczurowski + 1 · CVE-2026-46593 · Published 2026-07-31 · Updated 2026-07-31

NVD

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-46593

Affected Products

Phppollscript

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-46593 · Security Note
• https://cert.pl/en/posts/2026/07/CVE-2025-67649 · Note
• https://phpjabbers.com/php-poll-script · Note