CVE-2008-5573

UNKNOWN

SQL injection vulnerability in the login feature in Poll Pro 2

Published Dec 15, 2008

Modified 1 years ago

Details

SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) Password and (2) username parameters.

References

WEB

http://osvdb.org/50576

ADVISORY

http://secunia.com/advisories/33044

ADVISORY

http://securityreason.com/securityalert/4741

WEB

http://www.securityfocus.com/bid/32707

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/47169

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2008-5573

DETECTION

https://www.exploit-db.com/exploits/7391

CVSS Analysis

CVSS v2.0

7.5

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

PartialA:P

7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P

Ecosystems

Timeline

PublishedDec 15, 2008

ModifiedAug 7, 2024