CVE

Id
44288  
CVE No.
CVE-2010-1704  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arbitrary SQL commands via (1) the password field to login.php, (2) the login field (aka email parameter) to login.php, (3) the password field (aka pass parameter) to the default URI under admin/, and possibly (4) the login field to the default URI under admin/. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20100504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
482863 44288 CVE-2010-1704 MISC:http://packetstormsecurity.org/1004-exploits/aps-sqlxss.txt  View
482864 44288 CVE-2010-1704 EXPLOIT-DB:12395  View
482865 44288 CVE-2010-1704 URL:http://www.exploit-db.com/exploits/12395  View
482866 44288 CVE-2010-1704 BID:39745  View
482867 44288 CVE-2010-1704 URL:http://www.securityfocus.com/bid/39745  View
482868 44288 CVE-2010-1704 SECUNIA:39622  View
482869 44288 CVE-2010-1704 URL:http://secunia.com/advisories/39622  View
482870 44288 CVE-2010-1704 XF:aps-login-sql-injection(58127)  View
482871 44288 CVE-2010-1704 URL:http://xforce.iss.net/xforce/xfdb/58127  View
482872 44288 CVE-2010-1704 XF:polls-login-sql-injection(58189)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38249 JVNDB-2010-004034 Free Realty の agentadmin.php における SQL インジェクションの脆弱性 Free Realty の agentadmin.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-1708 44288 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004034.html  View