Field Assessment
AI analysis pending.
CVE
CVE-2009-4745
Severity
HIGH
CVSS
7.5
EPSS
0.91%
Original Filing — NVD Description
Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) sortField, (2) sortDesc, or (3) pageNumber parameter in a login action.