Sql injection

2014-01-2116:06:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.5%

JSON

SQL injection vulnerability in vote.php in the 2Glux Sexy Polling (com_sexypolling) component before 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the answer_id[] parameter.

CPENameOperatorVersion
com_sexypollingeq1.0.3
com_sexypollingeq0.9.7
com_sexypollingeq0.9.6
com_sexypollingeq1.0.4
com_sexypollingeq1.0.2
com_sexypollingeq0.9.4
com_sexypollingeq1.0.7
com_sexypollingle1.0.8
com_sexypollingeq0.9.1
com_sexypollingeq1.0.1

Name	Operator	Version
com_sexypolling	eq	1.0.3
com_sexypolling	eq	0.9.7
com_sexypolling	eq	0.9.6
com_sexypolling	eq	1.0.4
com_sexypolling	eq	1.0.2
com_sexypolling	eq	0.9.4
com_sexypolling	eq	1.0.7
com_sexypolling	le	1.0.8
com_sexypolling	eq	0.9.1
com_sexypolling	eq	1.0.1