SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Dspoll | Dsportal | 1.1 (including) | 1.1 (including) |