CVE-2010-1704

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-05-04 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arbitrary SQL commands via (1) the password field to login.php, (2) the login field (aka email parameter) to login.php, (3) the password field (aka pass parameter) to the default URI under admin/, and possibly (4) the login field to the default URI under admin/. NOTE: some of these details are obtained from third party information.

Affected products

2Daybiz Polls Script: all versions

References

http://packetstormsecurity.org/1004-exploits/aps-sqlxss.txt
http://secunia.com/advisories/39622
http://www.exploit-db.com/exploits/12395
http://www.securityfocus.com/bid/39745
https://exchange.xforce.ibmcloud.com/vulnerabilities/58127
https://exchange.xforce.ibmcloud.com/vulnerabilities/58189
http://packetstormsecurity.org/1004-exploits/aps-sqlxss.txt
http://secunia.com/advisories/39622
http://www.exploit-db.com/exploits/12395
http://www.securityfocus.com/bid/39745
https://exchange.xforce.ibmcloud.com/vulnerabilities/58127
https://exchange.xforce.ibmcloud.com/vulnerabilities/58189

Get alerted when CVE-2010-1704 or the next vulnerability affects your stack