Vulnerabilities > CVE-2002-0589 - Unspecified vulnerability in Steve Korbett Pvote

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
steve-korbett
exploit available
NVD
Published: 2002-06-18
Updated: 2008-09-05

Summary

PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password.

Vulnerable Configurations

Part Description Count
Application
Steve_Korbett
4

Exploit-Db

descriptionPVote 1.0/1.5 Unauthorized Administrative Password Change Vulnerability. CVE-2002-0589. Webapps exploit for php platform
idEDB-ID:21397
last seen2016-02-02
modified2002-04-18
published2002-04-18
reporterDaniel Nyström
sourcehttps://www.exploit-db.com/download/21397/
titlePVote 1.0/1.5 Unauthorized Administrative Password Change Vulnerability

References