CVE-2002-2163 KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php.
MediumCVSS 4.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| killervault kvpoll | = 1.1 | No fix listed |
References
- www.ifrance.com vendor-advisory
- 4736 vdb-entry