Description
Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request to phpPollAdmin.php3. NOTE: this issue might subsume CVE-2006-3764.
References
- 22522 vdb-entry
- 20070211 phpPolls 1.0.3 (acces to sensitive file) mailing-list
- 33694 vdb-entry
- 2242 third-party-advisory