← Database

CVE-2009-3596

HIGH CVSS: 7.5 Published: 2009-10-08 Modified: 2026-06-16

Description

JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request.

Affected Platforms

Joxtechnology Ajox Poll

Weakness Type

CWE-264

References