Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to comments.php or (2) poll_id parameter to page.php.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Advanced_poll | Advanced_poll | 2.0.2 (including) | 2.0.2 (including) |