Some vulnerabilities have been reported in Seditio, which can be exploited by malicious people to conduct SQL injection attacks and other attacks with unknown impacts.

1) Input to the "id" parameter in polls.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) There are four more vulnerabilities that are caused due to some unspecified errors. No more information is currently available.

The vulnerabilities are reported in version 110 downloaded before 2006-11-24. Other versions may also be affected.

Solution
Update to version 110 released on 2006-11-24.

Provided and/or discovered by
Mustafa Can Bjorn Ipekci, ajann

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area