EUVD-2002-0584

Malware in sbrugna...

CVE-2002-0589: Undefined Security Weakness

PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling chinfo.php with the newpass and confirm parameters both set to the new password...