CVE-2010-1704

no score yetEPSS 1.2%

2daybiz polls script: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arbitrary SQL commands via (1) the password field to login.php, (2) the login field (aka email parameter) to login.php, (3) the password field (aka pass parameter) to the default URI under admin/, and possibly (4) the login field to the default URI under admin/. NOTE: some of these details are obtained from third party information.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-05-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

2daybiz:polls_script

References

http://packetstormsecurity.org/1004-exploits/aps-sqlxss.txt
http://secunia.com/advisories/39622
http://www.exploit-db.com/exploits/12395
http://www.securityfocus.com/bid/39745
https://exchange.xforce.ibmcloud.com/vulnerabilities/58127

Check your stack JSON