PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.
Metrics
Affected Vendors & Products
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T02:56:38.140Z
Reserved: 2002-06-11T00:00:00
Link: CVE-2002-0588

No data.

Status : Deferred
Published: 2002-06-18T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2002-0588

No data.

No data.