Vulnerability in Cgi-World Poll It

CVE-2000-1069

pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.

EPSS: 0.023 (81.2th percentile) — read the EPSS interpretation.

Affected products

Cgi-world Poll_it — versions 2.0, 2.01
Cgi-world Poll_it_pro — versions 1.6
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)