CVE-2005-4632

Vote! Pro < 4.0 - SQL Injection via poll_frame.php poll_id Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in poll_frame.php in Vote! Pro 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the poll_id parameter.

References (2)

Core 2
Core References
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/21309

Scores

EPSS 0.0121
EPSS Percentile 65.4%

Details

CWE
CWE-89
Status published
Products (1)
vote_pro/vote_pro < 4.0
Published Dec 31, 2005
Tracked Since Feb 18, 2026