CVE-2010-1704: SQL Injection
Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arbitrary SQL commands via (1) the password field to login.php, (2) the login field (aka email parameter) to login.php, (3) the password field (aka pass parameter) to the default URI under admin/, and possibly (4) the login field to the default URI under admin/. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1704?
CVE-2010-1704 is classified as a medium-severity vulnerability.
How do I fix CVE-2010-1704?
To fix CVE-2010-1704, ensure input validation is implemented for all fields that accept user input, particularly in login.php.
What types of attacks are possible with CVE-2010-1704?
CVE-2010-1704 allows remote attackers to execute arbitrary SQL commands, leading to potential data manipulation and unauthorized access.
Which software versions are affected by CVE-2010-1704?
CVE-2010-1704 affects multiple versions of the 2daybiz Polls Script.
How can I verify if my system is vulnerable to CVE-2010-1704?
You can verify if your system is vulnerable to CVE-2010-1704 by testing login functionalities for improper input handling that could lead to SQL injections.