Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2007-1166

CVSS 7.5 10 detections found
View on NVD →
SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter.

Detection rules

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv UNION SELECT rev 9 2020-09-11
suricata ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv SELECT rev 9 2020-09-11
suricata ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv INSERT rev 10 2020-09-11
suricata ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv DELETE rev 10 2020-09-11
suricata ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv UPDATE rev 10 2020-09-11
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv UNION SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv INSERT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv DELETE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS Nabopoll SQL Injection Attempt -- result.php surv UPDATE rev 7 2010-12-27