31187Third-party advisory
http://secunia.com/advisories/31187 CVE-2008-3310
Pre Survey Generator - 'default.asp' SQL Injection
Record summary
CVE-2008-3310 has a selected CVSS score of 7.5; EIP currently links 2 catalogued exploits.
Description
SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBPre Survey Generator - 'default.asp' SQL InjectionExploitDB exploitby DreamTurkNot analyzed1 file
ExploitDBPre Survey Poll - 'catid' SQL InjectionExploitDB exploitby DreamTurkNot analyzed1 file
References
54039Third-party advisory
http://securityreason.com/securityalert/4039 presurveypoll-default-sql-injection(43956)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/43956 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-3310 6119exploit
https://www.exploit-db.com/exploits/6119