← Database

CVE-2009-2618

HIGH CVSS: 7.5 Published: 2009-07-27 Modified: 2026-06-16

Description

SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php.

Affected Platforms

Maxdev Mdpro

Weakness Type

CWE-89

References