PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2002-06-11T04:00:00
Updated: 2024-08-08T02:56:38.140Z
Reserved: 2002-06-11T00:00:00
Link: CVE-2002-0588

No data.

Status : Modified
Published: 2002-06-18T04:00:00.000
Modified: 2024-11-20T23:39:25.700
Link: CVE-2002-0588

No data.