CVE-2008-4765
osCommerce Poll Booth Add-On 2.0 - SQL Injection via pollID Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-4765. PoCs published by S@BUN.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Pollbooth v2.0 by injecting a UNION-based query to extract user passwords from the database. The attack is performed via a crafted URL parameter.
Description
SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Pollbooth v2.0 by injecting a UNION-based query to extract user passwords from the database. The attack is performed via a crafted URL parameter.
This exploit demonstrates an SQL injection vulnerability in osCommerce Poll Booth v2.0 by injecting a UNION-based query to extract user passwords from the database. The attack leverages unsanitized input in the 'pollID' parameter.