PT-2000-1978 · Poll It · Poll It

Publicado 2000-12-11 · Atualizado 2017-10-10 · CVE-2000-1070

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Poll It versions 2.01 and earlier

Description The issue allows remote attackers to access sensitive or private information because pollit.cgi uses data files located under the web document root.

Recommendations For Poll It versions 2.01 and earlier, consider relocating data files to a secure location outside the web document root to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2000-1070

Produtos afetados

Poll It

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/5794 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1070 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=97236719315352&w=2 · Nota