PVote Poll Content Manipulation Vulnerability

PVote is a web voting system written in PHP. It will run on most Unix and Linux variants as well as Microsoft Windows operating systems.

It is possible for a remote attacker to add/delete web polls just by manipulating the values of URL parameters.


 

Privacy Statement
Copyright 2010, SecurityFocus