CVE-2010-5004: SQL Injection
Published Nov 2, 2011
·Updated
SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to execute arbitrary SQL commands via the category parameter.
Affected Software
1 affected component
2daybiz Polls Script
Event History
Nov 2, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-5004?
CVE-2010-5004 has a high severity rating due to the potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2010-5004?
To fix CVE-2010-5004, validate and sanitize user input for the category parameter in the searchvote.php file.
3
What software is affected by CVE-2010-5004?
CVE-2010-5004 affects the 2daybiz Polls (Advanced Poll) Script.
4
Can CVE-2010-5004 lead to data compromise?
Yes, due to its SQL injection nature, CVE-2010-5004 can potentially lead to unauthorized data access or manipulation.
5
Is CVE-2010-5004 still a risk in modern applications?
While CVE-2010-5004 pertains to an older script, the underlying SQL injection vulnerability remains a risk in many applications if not properly addressed.