Authentication flaw

Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request to phpPollAdmin.php3. NOTE: this issue might subsume CVE-2006-3764...

phpPolls 1.0.3 Administration ByPass

SOFTWARE: ========= phpPolls 1.0.3 DESCRIPTION: ============ dork: phpPolls view.php3 add to last path phpPollAdmin.php3?pollaction=create create a new poll Credits:AlpEren and tugr@ Site: http://www.ayyildiz.org http://www.ayyildiz-team.org Special thanx to...