Description
Till Gerken phpPolls 1.0.3 allows remote attackers to create a new poll via a direct request to phpPollAdmin.php3 with the poll_action parameter set to create.
References
- 20060710 phpPolls 1.0.3 Administration ByPass mailing-list
- phppolls-pollaction-security-bypass(27707) vdb-entry
- 1269 third-party-advisory