CVE-2007-0874

Allons_voter 1.0 is affected by CVE-2007-0874. Remote attackers can bypass authentication and access certain administrative functionality by issuing direct requests to admin_ajouter.php or admin_supprimer.php. The note indicates this could be leveraged to conduct cross-site scripting (XSS) attack...