pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.
Max CVSS
5.0
EPSS Score
0.40%
Published
2000-12-11
Updated
2017-10-10
pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.
Max CVSS
6.4
EPSS Score
1.50%
Published
2000-12-11
Updated
2017-10-10
pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.
Max CVSS
10.0
EPSS Score
0.49%
Published
2000-12-11
Updated
2017-10-10
3 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!