| Package | Affected versions | Patched versions |
|---|---|---|
| poll it | = 2.0= 2.01 | |
| poll it pro | = 1.6 |
pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free