| Package | Affected versions | Patched versions |
|---|---|---|
| pvote | = 1.0= 1.0a= 1.0b= 1.5 |
PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free