CVE-2007-1166

Nabopoll 1.2 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by s0cratex · phpwebappsphp

https://www.exploit-db.com/exploits/3355

View Code ZIP pw:eip

References (6)

[Various Sources] http://attrition.org/pipermail/vim/2007-February/001379.html

[Exploit] http://www.securityfocus.com/bid/22649

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/460765/100/0/threaded

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3355

[Third Party Advisory, VDB Entry] http://osvdb.org/33753

[Third Party Advisory] http://securityreason.com/securityalert/2372

Scores

EPSS 0.0227

EPSS Percentile 84.7%

Details

CWE

CWE-89

Status published

Products (1)

nabocorp/nabopoll 1.2

Published Mar 02, 2007

Tracked Since Feb 18, 2026