CVE-2009-0295 Information

Description

SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2 when magic_quotes_gpc is disabled allows remote attackers to execute arbitrary SQL commands via the id parameter.

Reference

http://osvdb.org/51616 http://secunia.com/advisories/33666 http://www.securityfocus.com/bid/33452 https://www.exploit-db.com/exploits/7867