Vulnerability Details CVE-2008-3310
SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/31187
- http://securityreason.com/securityalert/4039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43956
- https://www.exploit-db.com/exploits/6119
- http://secunia.com/advisories/31187
- http://securityreason.com/securityalert/4039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43956
- https://www.exploit-db.com/exploits/6119
Products affected by CVE-2008-3310
-
cpe:2.3:a:preproject:pre_survey_poll:*