PT-2003-1177 · Sympoll · Sympoll

Published 2003-04-11 · Updated 2008-09-05 · CVE-2002-1430

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sympoll version 1.2

Description The issue allows remote attackers to read arbitrary files, possibly by modifying certain PHP variables through URL parameters when register globals is enabled.

Recommendations For Sympoll version 1.2, consider disabling the register globals setting as a temporary workaround to minimize the risk of exploitation. Additionally, restrict access to sensitive files and directories to prevent unauthorized reading. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-1430

Affected Products

Sympoll

References · 5

• 🔥 http://iss.net/security_center/static/9723.php · Exploit
• http://securityfocus.com/bid/5360 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1430 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0401.html · Vendor Advisory
• http://ralusp.net/downloads/sympoll/changelog.txt · Note