high7.5Public exploit code
CVE-2009-2618
SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL commands via the po…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MD-Pro 1.083.x - Survey Module 'pollID' Blind SQL Injection2009-06-25 · webapps · php · Verified
Impact
SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maxdev | Mdpro | Version 1.083 |