5
CVE-2002-0588
- EPSS 6.61%
- Veröffentlicht 18.06.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:57:43
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Steve Korbett ≫ Pvote Version1.0
Steve Korbett ≫ Pvote Version1.0a
Steve Korbett ≫ Pvote Version1.0b
Steve Korbett ≫ Pvote Version1.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.61% | 0.93 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://online.securityfocus.com/archive/1/268231
http://orbit-net.net:8001/php/pvote/
http://www.iss.net/security_center/static/8877.php
http://www.securityfocus.com/bid/4540