Lucene search

K
cveMitreCVE-2008-7045
HistoryAug 24, 2009 - 10:30 a.m.

CVE-2008-7045

2009-08-2410:30:02
CWE-287
mitre
web.nvd.nist.gov
27
aj square
free polling script
authentication bypass
reset votes
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

69.1%

AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php.

Affected configurations

Nvd
Node
ajsquarefree_polling_script
VendorProductVersionCPE
ajsquarefree_polling_script*cpe:2.3:a:ajsquare:free_polling_script:*:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

69.1%

Related for CVE-2008-7045