CVE-2000-1068

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Dec 11, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-10696.4pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by speciCVE-2000-10705.0pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to accessCVE-2000-107110.0The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackersCVE-2000-10727.2iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and executeCVE-2000-10737.2csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain rootCVE-2000-107410.0csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser accCVE-2000-10755.0Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbCVE-2000-107610.0Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could CVE-2000-107710.0Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a lonCVE-2000-10785.0ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.CVE-2000-10797.5Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers tCVE-2000-10805.0Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.
CVE-2000-1068: Critical severity, CVSS 10.0 | Vulnix