CVE-2006-2235

CodeMunkyX (aka free-php.net) Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI of the application.

Score

CVSS 2.0 7.6 High

Status

Modified - cve@mitre.org

Published

2006-05-05

Last modified

2024-08-07

Affected products

• Simple Poll (Codemunkyx)

References

• http://www.free-php.net/scripts/zip/5.zip
• http://www.securityfocus.com/archive/1/432577/100/0/threaded
• http://www.securityfocus.com/bid/17771