include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify the IP address of a client, which makes it easier for remote attackers to spoof the source IP and bypass voting restrictions.
References
Configurations
History
21 Nov 2024, 00:10
Type | Values Removed | Values Added |
---|---|---|
References | () http://evuln.com/vulns/131/summary.html - | |
References | () http://secunia.com/advisories/19899 - | |
References | () http://www.vupen.com/english/advisories/2006/1603 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/26154 - |
Information
Published : 2006-05-01 23:02
Updated : 2024-11-21 00:10
NVD link : CVE-2006-2131
Mitre link : CVE-2006-2131
CVE.ORG link : CVE-2006-2131
JSON object : View
Products Affected
advanced_poll
- advanced_poll
CWE