Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2009-08-24	CVE-2008-7046	Improper Authentication vulnerability in Ajsquare Free Polling Script AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045. network low complexity ajsquare CWE-287	6.4
2009-08-24	CVE-2008-7045	Improper Authentication vulnerability in Ajsquare Free Polling Script AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php. network low complexity ajsquare CWE-287	6.4