Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection

[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability

XSS in PHPKIT Version 1.6.03

[SA19443] PHP Script Index "search" Cross-Site Scripting Vulnerability

From:	Cyber Lords <fear_(at)_cyberlords.net>
Date:	29.03.2006
Subject:	Sql-injection in PollPro Version 4

Advisory: Sql-injection in PollPro Version 4
Довольно популярный скрипт для голосований.

Уязвимый скрипт/Vulnerable script: previous_poll.asp

SQL-inlections:

http://www.codefixer.com/poll/previous_poll.asp?pollID=36'

--------------------------
Cyber Lords Team
www.cyberlords.net