20070222 [TRUE] Nabopoll Blind SQL Injection vulnerabiliesmailing list
http://attrition.org/pipermail/vim/2007-February/001379.html CVE-2007-1166
Nabopoll 1.2 - 'result.php?surv' Blind SQL Injection
Record summary
CVE-2007-1166 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBNabopoll 1.2 - 'result.php?surv' Blind SQL InjectionExploitDB exploitby s0cratexNot analyzed1 file
References
733753vdb entry
http://osvdb.org/33753 2372Third-party advisory
http://securityreason.com/securityalert/2372 20070221 Nabopoll Blind SQL Injection vulnerabiliesmailing list
http://www.securityfocus.com/archive/1/460765/100/0/threaded 22649vdb entry
http://www.securityfocus.com/bid/22649 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-1166 3355exploit
https://www.exploit-db.com/exploits/3355