Unscored CVE-2009-0112 EUVD-2009-0121GHSA-cwj7-47rj-pwwv

Cross-site request forgery (CSRF) vulnerability in admin/agent_edit.asp in PollPro 3.0 allows remote attackers to create or modify accounts…

Published Jan 9, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in admin/agent_edit.asp in PollPro 3.0 allows remote attackers to create or modify accounts as administrators via the username, password, and name parameters.

References

pollpro-unspecified-csrf(47754) vdb-entry
4895 third-party-advisory
33319 third-party-advisory
20090103 PollPro 3.0 XSRF VuLn mailing-list