Description
pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.
References
- pollit-webroot-gain-access(5794) vdb-entry
- 20001023 Re: Poll It v2.0 cgi (again) mailing-list