CVE-2002-0589

PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling chinfo.php with the newpass and confirm parameters both set to the new password...

CVE-2002-0589

The CVE-2002-0589 issue affects PVote prior to 1.9. An unauthenticated remote attacker can change the administrative password by directly calling ch_info.php with newpass and confirm parameters both set to the new password, enabling privilege gain. The available documents confirm the vulnerabilit...