CVE-2009-3596

JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request...

CVE-2009-3596

CVE-2009-3596 affects JoxTechnology Ajox Poll. The vulnerability is an access-control flaw where an attacker can bypass authentication and obtain administrative access by requesting admin/managepoll.php directly. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network vector and low a...