CVE-2002-0588

PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to 1 add.php or 2 del.php...

CVE-2002-0588

PVote before 1.9 is affected. The root cause is missing authentication for restricted operations, enabling remote attackers to add or delete polls by tampering with parameters sent to add.php or del.php. Publications note impact as unauthorized modification of polls; no further exploit details ar...