CVE-2002-0588

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/268231Exploit, Vendor Advisory
http://orbit-net.net:8001/php/pvote/Vendor Advisory
http://www.iss.net/security_center/static/8877.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4540Exploit, Patch, Vendor Advisory
http://online.securityfocus.com/archive/1/268231Exploit, Vendor Advisory
http://orbit-net.net:8001/php/pvote/Vendor Advisory
http://www.iss.net/security_center/static/8877.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4540Exploit, Patch, Vendor Advisory

Timeline

Published: Jun 18, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002