PT-2003-1177 · Sympoll · Sympoll

Publicado 2003-04-11 · Atualizado 2008-09-05 · CVE-2002-1430

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sympoll version 1.2

Description The issue allows remote attackers to read arbitrary files, possibly by modifying certain PHP variables through URL parameters when register globals is enabled.

Recommendations For Sympoll version 1.2, consider disabling the register globals setting as a temporary workaround to minimize the risk of exploitation. Additionally, restrict access to sensitive files and directories to prevent unauthorized reading. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-1430

Produtos afetados

Sympoll

Referências · 5

• 🔥 http://iss.net/security_center/static/9723.php · Exploit
• http://securityfocus.com/bid/5360 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1430 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0401.html · Aviso do Fabricante
• http://ralusp.net/downloads/sympoll/changelog.txt · Nota