pollit.cgi in Poll It 2.01 and previous versions allows remote malicious users to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cgi-world poll it 2.0 |
||
cgi-world poll it 2.01 |
||
cgi-world poll it pro 1.6 |