Pollvote File Include Vulnerability
BID:15439
CVE-2005-3775 |Info
Pollvote File Include Vulnerability
| Bugtraq ID: | 15439 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 15 2005 12:00AM |
| Updated: | Nov 15 2005 12:00AM |
| Credit: | rUnViRuS is credited with the discovery of this vulnerability. |
| Vulnerable: |
Pollvote Pollvote |
| Not Vulnerable: | |
Discussion
Pollvote File Include Vulnerability
Pollvote is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this issue to execute arbitrary local and remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
Pollvote is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this issue to execute arbitrary local and remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
Exploit / POC
Pollvote File Include Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Pollvote File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.