Lucene search
HistoryMay 05, 2006 - 7:02 p.m.
CVE-2006-2235
cve-2006-2235
codemunkyx
simple poll
remote attack
admin privileges
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.1%
CodeMunkyX (aka free-php.net) Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI of the application.
Affected configurations
Node
codemunkyxsimple_pollMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| codemunkyx:simple_poll | codemunkyx simple poll | eq | 1.0 |
Related
nvd
nvd
CVE-2006-2235
2006-05-05 19:02:00
prion
prion
Authentication flaw
2006-05-05 19:02:00
cvelist
cvelist
CVE-2006-2235
2006-05-05 19:00:00
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.1%
Related for CVE-2006-2235