CVE-2010-1704 describes multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script. Attackers can exploit these flaws by injecting malicious SQL commands into the password and login fields of login.php, and the password field within the admin directory. This vulnerability carries a CVSS score of 7.5, indicating a high severity, as it allows unauthenticated remote attackers to compromise data confidentiality, integrity, and availability. While no active exploitation is confirmed and it's not on CISA's KEV catalog, an ExploitDB entry exists for a related Cross-Site Scripting/Authentication Bypass, and there is minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:2daybiz:polls_script:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.