CVE-2009-0295 - SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter

Back Back to CVE browser

MEDIUM

SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Jan 27, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 0.93%

Description

SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://osvdb.org/51616
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/33666
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/33452
vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/7867
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/51616		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/33666		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/33452		vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/7867		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 27, 2009

Updated Aug 7, 2024

Reserved Jan 27, 2009

Link CVE-2009-0295

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0295

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-0295