EUVD-2007-0918

Malware in sbrugna...

Authentication flaw

Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request to phpPollAdmin.php3. NOTE: this issue might subsume CVE-2006-3764...

CVE-2006-3764

The CVE-2006-3764 entry affects phpPolls 1.0.3. Affected component: phpPollAdmin.php3; root cause: remote attackers can create a new poll by issuing a direct request with poll_action set to create. This exposes an unauthorized action without user authentication as described in the public descript...