PT-2003-2133 · Unknown · Advanced Poll

Published 2003-10-25 · Updated 2017-07-11 · CVE-2003-1181

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Advanced Poll version 2.0.2

Description The issue allows remote attackers to obtain sensitive information via an HTTP request to "info.php", which invokes the phpinfo() function.

Recommendations For Advanced Poll version 2.0.2, consider restricting access to the "info.php" file to prevent unauthorized disclosure of sensitive information. As a temporary workaround, remove or disable the phpinfo() function invocation in "info.php" until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2003-1181

Affected Products

Advanced Poll

References · 8

• 🔥 http://securityfocus.com/archive/1/342493 · Exploit
• 🔥 https://exploit-db.com/exploits/22412 · Exploit
• 🔥 http://securityfocus.com/bid/8890 · Exploit
• http://osvdb.org/3292 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1181 · Security Note
• http://secunia.com/advisories/10068 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13515 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0019.html · Note