Skip to content

CVE-2008-4782 SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter.

HighCVSS 7.5 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter.

Affected products

ProductAffected versionsFixed in
aiocp = 1.4.000 No fix listed
aiocp = 1.4.001 No fix listed

References

  • 32431 third-party-advisory vendor-advisory
  • 4518 third-party-advisory
  • 6854 exploit