CVE-2000-1070

pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2000-12-11

Last modified

2024-08-08

Affected products

• Poll It (Cgi-world)
• Poll It Pro (Cgi-world)

References

• http://marc.info/?l=bugtraq&m=97236719315352&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5794