CVE-2007-0845

EPSS 6.4%

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3282unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/35847 https://exchange.xforce.ibmcloud.com/vulnerabilities/32337 https://www.exploit-db.com/exploits/3282 http://www.securityfocus.com/bid/22451