CVE-2009-3596

JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request...

CVE-2009-3596

CVE-2009-3596 affects JoxTechnology Ajox Poll. The vulnerability is an access-control flaw where an attacker can bypass authentication and obtain administrative access by requesting admin/managepoll.php directly. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network vector and low a...

AJOX Poll - managepoll.php Authentication Bypass

AJOX Poll - managepoll.php Authentication Bypass + AJOX Poll Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.joxtechnology.com/view/36/PHP/MySql-AJAX-Poll-script-with-pie-and-bar-graph/ + Authentication Bypass Go t...