CVE-2011-1099 in Quick Polls
Summary
Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the p parameter in a preview action to index.php, or (2) delete arbitrary files via a .. (dot dot) in the p parameter in a delete action to index.php.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
02/24/2011
Disclosure
03/09/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56781 | FocalMedia.Net Quick Polls index.php path traversal | 22 | Proof-of-Concept | Official fix | CVE-2011-1099 |